CVE-2026-33997
CVE-2026-33997: 2 tracked advisory records across Docker, Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Docker
1 advisory- Advisory severityMedium6.8
Medium [CVE-2026-33997] Moby is an open source container framework
CVE-2026-33997Source published Source updated
Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a privilege set that differs from the one approved by the user. Plugins that request exactly one privilege are also affected, because no comparison is performed at all. This issue has been patched in version 29.3.1.
- Related products — impact not confirmed
- Moby
- Source-reported affected versions
- before 29.3.1
- Source-reported fixed versions
- 29.3.1
- Mitigation guidance
- Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install.
Red Hat
1 advisory- Advisory severityHigh8.4
High [CVE-2026-33997] Privilege validation bypass during plugin installation
CVE-2026-33997Source published
Privilege validation bypass during plugin installation. Red Hat rates this important (CVSS 8.4). Weakness: CWE-266. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753, multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439. Resolved in Red Hat advisory RHSA-2026:21769 — update the affected packages (`sudo dnf update`).
- Affected products in this advisory
- Red Hat multicluster global hub 1.4.3
- Red Hat multicluster global hub 1.4.4
- Red Hat multicluster global hub 1.6.0
- Red Hat multicluster global hub 1.5.0
3 more entries in the full advisory.
- Source-reported affected versions
- multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1780167118
- multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1778867753
- multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779579439
- Source-reported fixed versions
- RHSA-2026:21769
- Mitigation guidance
- Update the affected package(s) to the fixed version shipped in RHSA-2026:21769 (`sudo dnf update` / `yum update`).
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.