CVE-2021-41089 - CVE House
Back to Database
Status published Low CVE-2021-41089

`docker cp` allows unexpected chmod of host files

Vulnerability Description

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in Moby (Docker Engine) 20.10.9. Users should update to this version as soon as possible. Running containers do not need to be restarted.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-41089

Credits & Attribution

No credits recorded in the NVD database.

References

More from moby

View All →
CVE-2025-54410
Moby's Firewalld reload removes bridge network isolation
Low 3.3
CVE-2025-54388
Moby's Firewalld reload makes published container ports accessible from remote hosts
Medium 5.1
CVE-2024-41110
Moby authz zero length regression
Critical 10
CVE-2024-32473
Moby IPv6 enabled on IPv4-only network interfaces
Medium 4.7
CVE-2024-29018
External DNS requests from 'internal' networks could lead to data exfiltration
Medium 5.9

Affected Vendor

Affected Software

moby
Vulnerable Versions:
< 20.10.9

Timeline

Official Publish: October 4th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Weaknesses (CWE)

CWE-281

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.