The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to     v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or     piped through `docker cp -`, the daemon resolves decompression binaries (such as `xz` or `unpigz`) from     the container's filesystem rather than the host's due to incorrect ordering of operations. A malicious     container image containing a trojanized decompression binary can achieve arbitrary code execution with     full daemon privileges, including host root UID and unrestricted capabilities, when a user uploads a     compressed (xz or gzip) archive into that container. This issue is fixed in Docker Engine 29.5.1 and     moby/moby v2.0.0-beta.14. Workarounds include only running containers from trusted images, using     authorization plugins to restrict access to the `PUT /containers/{id}/archive` endpoint, and avoiding     piping compressed archives into containers created from untrusted images (CVE-2026-41567)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-41567

high Nessus Plugin ID 320818

Version 1.2