CVE-2026-33997 Details

A vulnerability allowing the bypass of privilege validation for plugins during the installation process has been identified in Moby Docker Engine versions prior to 29.3.1. This issue arises from a flaw in the daemon's logic for comparing privileges, which may lead to the acceptance of a privilege set that does not align with what the user intended to approve. Additionally, plugins that request a single privilege are impacted, as no validation comparison is conducted in those cases.

Users can update to Docker Engine version 29.3.1 or later, where this vulnerability has been patched. If an immediate update is not possible, it is recommended to avoid installing plugins from untrusted sources, carefully review the privileges requested by plugins during installation, restrict access to the Docker daemon to trusted parties, and avoid relying solely on plugin privilege approval as a security control in sensitive environments.