CVE-2020-27534Medium· 5.3▾ SunlitA flaw was found in moby. Moby buildkit calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
1.7%
1.7% → 1.8%
Last analysed / modified upstream
A flaw was found in moby. Moby buildkit calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
moby/buildkit: calls os.OpenFile with a potentially unsafe qemu-check temporary pathname — rated Moderate by Red Hat. Released 2020-12-31, updated 2026-10-14.
Not affected:
Refer to the advisory for fix availability.
Affected packages:
github.com/moby/moby < 19.03.9github.com/docker/docker < 19.03.9Patched in:
github.com/moby/moby 19.03.9github.com/docker/docker 19.03.9Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114140High· 7.8nbconvert: nbconvert: arbitrary file write via path traversal in ExtractOutputPreprocessor (CVE-2026-114140)
CVE-2026-114109High· 7.8uv: uv: Arbitrary code execution via path traversal in entry point names (CVE-2026-114109)
CVE-2026-55888High· 8.2xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames (CVE-2026-55888)
CVE-2026-115354Medium· 6.5mistune: mistune: Information disclosure via path traversal in Include directive (CVE-2026-115354)
CVE-2026-114126High· 8.8storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token (CVE-2026-114126)
CVE-2026-114125High· 8.8storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictions (CVE-2026-114125)