Is Docker Engine 27.0.1 affected?

CVSS 9.9

8 known vulnerabilities affect 27.0.1 (highest CVSS 9.9).

Your branch 27 has reached end of life (May 3, 2025).

66 newer releases in its track, up to 29.9.2. What changed up to 29.9.2

Vulnerabilities affecting 27.0.1

9.9
CVE-2024-41110 Authz zero length regression
8.8
CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
7.6
CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
7.2
CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
7.2
CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
6.8
CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
6.1
CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1
3.3
CVE-2025-54410 Firewalld reload removes bridge network isolation fixed in 28.0.0