Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access
Docker Engine carries a high-severity flaw, CVE-2026-34040 (CVSS 8.8), that lets a specially crafted API request reach an authorization plugin without its body, so the plugin may approve a request it would otherwise deny. The bug is an incomplete fix for...