PT-2026-29933 · Go · Github.Com/Docker/Docker+2

Published 2026-04-02 · Updated 2026-04-02

OSV

Moby has an Off-by-one error in its plugin privilege validation in github.com/docker/docker

Related Identifiers

GO-2026-4883

Affected Products

Github.Com/Docker/Docker

Github.Com/Moby/Moby

Github.Com/Moby/Moby/V2

References · 5

• https://osv.dev/vulnerability/GO-2026-4883 · Vendor Advisory
• https://github.com/moby/moby/commit/f4d6f25bf0c3fa12d4968320a45685947756a22a · Note
• https://github.com/moby/moby/releases/tag/docker-v29.3.1 · Note
• https://github.com/moby/moby/security/advisories/GHSA-pxq6-2prw-chj9 · Note
• https://docs.docker.com/engine/extend/legacy_plugins · Note