Docker: security advisories, deprecations and releases

Node2Shell

Researchers at Imperva have demonstrated a proof-of-concept exploit named 'Node2Shell' for a vulnerability (CVE-2026-111497) in the Brotli decoder bundled with Node.js. By feeding crafted Brotli data to an application, an attacker can achieve remote code execution. The PoC was successfully demonstrated on the official Node.js 24.22.0 image for Linux arm64.

CVE-2026-111497

Docker 29.9.2 released

Updates Go runtime to 1.26.10, blocking eight compromised eMudhra TLS intermediates listed in CVE-2026-111943. Image pulls/pushes to registries using these intermediates will now fail TLS verification.

CVE-2026-111943

moby v25.0.18 fixes CVE-2026-17106 tar extraction flaw

Patch release fixes directory-traversal issue allowing crafted tar archives to write files outside the extraction directory.

CVE-2026-17106

Docker v29.8.2 fixes multiple security vulnerabilities

Docker Engine 29.8.2 patches several critical CVEs including unbounded CPU/memory use from malicious OCI images, DNS hijacking, overlay network attacks, and numerous BuildKit daemon crashes and cache poisoning issues.

CVE-2026-53493 CVE-2026-92542 CVE-2026-92543 CVE-2026-93315 CVE-2026-93316 CVE-2026-93317 CVE-2026-93318 CVE-2026-93319 CVE-2026-93320 CVE-2026-93321 CVE-2026-93322 CVE-2026-93323 CVE-2026-93326

Carbonato

Cybersecurity researchers have detailed a new botnet malware named Carbonato. This malware targets exposed Docker daemons to install an open-source AI agent framework called Hermes Agent. After installation, Carbonato modifies the agent's 'SOUL.md' persona file with a 39-line prompt, which directs the AI agent to execute tasks received from the attacker.

Carbonato

A new botnet malware, named Carbonato, has been identified. It specifically targets hosts with insecurely configured Docker daemons. The primary payload is the installation of the Hermes Agent AI framework, which allows the attacker to take control of the compromised host.

Copy Fail

A vulnerability named 'Copy Fail' (CVE-2026-31431) has been identified in the Linux kernel's crypto component (algif_aead). This vulnerability, classified as 'Incorrect Resource Transfer Between Spheres', affects a large number of Siemens SIPLUS and SIMATIC products, including those running on Debian Linux and in containerized environments. The vulnerability has a CVSS 3.1 score of 7.8 (High). Siemens has released updates for…

CVE-2026-31431

Docker 25.0 reaches end of life on 2026-12-04

Docker 25.0 reaches end of life on 2026-12-04, as listed by endoflife.date.

Docker v29.9.1 released

Docker 29.9.1 updates containerd to v2.4.2, fixes several bugs, and resolves networking, rootless, and image-layer issues.

CVE-2026-95839

Docker Engine v29.9.0 released

Docker Engine 29.9.0 updates Go, containerd, and BuildKit, fixes multiple HTTP/2 vulnerabilities, and resolves networking, rootless, and image-store bugs.

CVE-2026-56857 CVE-2026-78659 CVE-2026-78663 CVE-2026-78669 CVE-2026-97032

Docker Sandbox: code checkout workflows explained

Explains three ways to place code in Docker sandboxes: host mount, per-task worktrees, or fully inside the sandbox.

Running Pulumi Neo in a Docker Sandbox

Shows how to isolate Pulumi Neo in a Docker microVM so an agent cannot reach production credentials or hosts.

Switch to multi-stage Docker builds to reduce inode consumption

Single-stage builds include build dependencies and node_modules in final images. Multi-stage builds separate build from runtime, reducing file count from 40,000+ to dozens of files per image.