Go/github.com/amir20/dozzle CVE-2026-24740: critical 9.9, EPSS 0.42%

Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access

Action: Upgrade github.com/amir20/dozzle to 1.29.1-0.20260125230338-620e59aa2463 or later.

go get github.com/amir20/dozzle@v1.29.1-0.20260125230338-620e59aa2463

Affected

Fixed versions

Sources

• osv: GHSA-m855-r557-5rc5
• nvd: CVE-2026-24740
• https://github.com/amir20/dozzle/security/advisories/GHSA-m855-r557-5rc5
• https://github.com/amir20/dozzle/commit/620e59aa246347ba8a27e68c532853b8a5137bc1
• https://github.com/amir20/dozzle
• https://github.com/amir20/dozzle/releases/tag/v9.0.3

CVE-2026-24740 · published 2026-01-27T00:55:33Z · modified 2026-02-03T03:05:50.592189Z · JSON