CVE-2026-24740: Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access

January 27, 2026 (updated January 29, 2026)

A flaw in Dozzle’s agent-backed shell endpoints allows a user restricted by label filters (for example, label=env=dev) to obtain an interactive root shell in out‑of‑scope containers (for example, env=prod) on the same agent host by directly targeting their container IDs.

Note: Tested on v9.0.2 likely affects all versions with agent mode support.

References

github.com/advisories/GHSA-m855-r557-5rc5
github.com/amir20/dozzle
github.com/amir20/dozzle/commit/620e59aa246347ba8a27e68c532853b8a5137bc1
github.com/amir20/dozzle/releases/tag/v9.0.3
github.com/amir20/dozzle/security/advisories/GHSA-m855-r557-5rc5
nvd.nist.gov/vuln/detail/CVE-2026-24740

Code Behaviors & Features

Detect and mitigate CVE-2026-24740 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →