CVE-2014-6407: Docker

High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days.

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.

Affected products

• Docker Docker: up to and including 1.3.1; version 1.0.0 only; version 1.3.0 only

Published 2014-12-12. Last modified 2026-06-17.