Vulnerability · Published Sep 28, 2026 · Assigned by VulnCheck
CVE-2026-102332Dozzle before 11.1.2 Path Traversal via Log ZIP Download
Medium 6.1
In plain English
A medium-severity path traversal in dozzle from amir20. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.3%top 74.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs.
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N
References
- https://github.com/amir20/dozzle/pull/5242 patch, issue-tracking
- https://github.com/amir20/dozzle/commit/bc07db73dd84ce2cb939b744e983a8cfdf29c644 patch
- dozzle v11.1.2 Release Notes release-notes
- https://github.com/amir20/dozzle/blob/v11.1.1/internal/web/download.go#L141-L146 technical-description
- https://github.com/amir20/dozzle/blob/v11.1.1/internal/container/docker/client.go#L610-L614 technical-description
- https://github.com/amir20/dozzle product
- VulnCheck Advisory: Dozzle before 11.1.2 Path Traversal via Log ZIP Download third-party-advisory