5-Year-Old Docker Flaw Resurfaces, Allowing Attackers to Slip Past Authorization

A critical-severity vulnerability in Docker Engine, identified as CVE-2024-41110, has been found in certain versions. This serious flaw can, in some cases, allow attackers to bypass authorization plugins (AuthZ). Although the issue was first discovered and addressed in Docker Engine v18.09.1, released in January 2019, the fix was not incorporated into later versions, resulting in the reemergence of the vulnerability.