Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.
CVSS 3.1MEDIUM 6.3·Local·Low privileges·No interaction·EPSS 0.00141·Published 2026-09-13·Fixed in 1.7.0CWE-24