Docker Vulnerability Let Attackers Bypass Authorization and Gain Host Access

A high-severity Docker Engine vulnerability (CVE-2026-34040) allows attackers to bypass authorization plugins by crafting oversized API request bodies that are dropped before plugin inspection, potentially enabling low-privileged local actors to escape containers and compromise the host; Docker has released Engine 29.3.1 to address the flaw and recommends upgrading or applying mitigations such as avoiding body-dependent AuthZ plugins, restricting Docker API access, and enforcing least privilege.