VersionDrift
Product

Is Docker Engine 29.2.0 affected?

Jan 26, 2026 · Release notes ↗

CVSS 8.8

6 known vulnerabilities affect 29.2.0 (highest CVSS 8.8).

23 newer releases in its track, up to 29.9.2. What changed up to 29.9.2

Vulnerabilities affecting 29.2.0

  • 8.8
    CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
  • 7.6
    CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
  • 7.2
    CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
  • 7.2
    CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
  • 6.8
    CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
  • 6.1
    CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1

Newer releases

29.9.2Oct 20, 202629.2.0 → 29.9.2
29.9.1Oct 14, 202629.2.0 → 29.9.1
29.9.0Oct 8, 202629.2.0 → 29.9.0
29.8.2Sep 30, 202629.2.0 → 29.8.2
29.8.1Sep 15, 202629.2.0 → 29.8.1
29.8.0Sep 3, 202629.2.0 → 29.8.0
29.7.2Aug 6, 202629.2.0 → 29.7.2
29.7.1Jul 31, 202629.2.0 → 29.7.1
29.7.0Jul 30, 202629.2.0 → 29.7.0
29.6.2Jul 16, 202629.2.0 → 29.6.2
29.6.1Jun 26, 202629.2.0 → 29.6.1
29.6.0Jun 18, 202629.2.0 → 29.6.0
29.5.3Jun 3, 202629.2.0 → 29.5.3
29.5.2May 20, 202629.2.0 → 29.5.2
29.5.1May 18, 202629.2.0 → 29.5.1
See how far your stack has drifted from upstream. Release data from vendors’ own sources · feed under CC BY 4.0 · Code under AGPL-3.0 Settings Feed status