VYPR
Unrated severityNVD Advisory· Published Mar 24, 2026· Updated Mar 25, 2026

Agent 2 Docker plugin arbitrary file read via Docker API injection

CVE-2026-23924

Description

Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon. An attacker capable of invoking Agent 2 can read arbitrary files from running Docker containers by injecting them via the Docker archive API.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.