CVE-2026-24740: amir20 dozzle Improper Access Control

Vulnerability summary

CVE-2026-24740 is a critical (CVSS 9.9) Improper Access Control vulnerability in amir20 dozzle. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 35.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 27-01-2026
   PublishedVulnerability first disclosed.
2. 28-01-2026
   Last modifiedVulnerability information updated.

Description

Dozzle is a realtime log viewer for docker containers. Prior to version 9.0.3, a flaw in Dozzle’s agent-backed shell endpoints allows a user restricted by label filters (for example, `label=env=dev`) to obtain an interactive root shell in out‑of‑scope containers (for example, `env=prod`) on the same agent host by directly targeting their container IDs. Version 9.0.3 contains a patch for the issue.

• CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
• CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.