Read the docs
TI-2026-65354 Aliases CVE-2026-102332GHSA-746p-gqhc-m84c

Dozzle before 11.1.2 Path Traversal via Log ZIP Download

Priority LOW 21CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
None · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00324 25th percentileScored 2026-11-07
Fix Fixed dozzle (amir20): 11.1.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
amir20dozzle8.9.1 to before 11.1.211.1.2Patch availableCNA
  • dozzle Vendoramir20 Affected 8.9.1 to before 11.1.2 Fixed in 11.1.2 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:amirraminfar:dozzle:*:*:*:*:*:*:*:*——amir20
  • cpe:2.3:a:amirraminfar:dozzle:*:*:*:*:*:*:*:* Versions — — ·amir20

Remediation

  • Fix · CNA dozzle (amir20) Fixed in 11.1.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-102332
  2. 2026-10-03 Alias added: GHSA-746p-gqhc-m84c

References

Patch 2

Other 4

  • TI-2026-19945 Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access CVSS 4.0HIGH 8.7
  • TI-2026-33098 Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) CVSS 3.1HIGH 8.6
  • TI-2026-32844 Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication CVSS 4.0HIGH 8.7
  • TI-2026-44477 Dozzle label filters do not restrict container event and statistics streams CVSS 3.1MEDIUM 4.3
  • TI-2026-51294 Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher CVSS 4.0LOW 2.3
  • TI-2024-31549 Dozzle uses unsafe hash for passwords CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences