Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap — CVE-2026-41568

Summary

## Summary A race condition during `docker cp` mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This advisory covers the race during mountpoint creation. The related race during the subsequent mount syscall is tracked in GHSA-rg2x-37c3-w2rh ## Details When copying files into a container, the daemon sets up a temporary filesystem view…

Product

go: github.com/docker/docker | go: github.com/moby/moby/v2 | go: github.com/moby/moby

What to do

General, cautious steps (verify details in the official source):

• Review exposure and plan remediation based on risk and environment.
• Identify affected product versions in your inventory and verify whether you are impacted.
• Apply vendor patches/updates or recommended mitigations as soon as available.
• Read the official advisory for exact affected versions and remediation steps.

Official advisory

• Read the official source
• CVE Record
• NVD

Related advisories