← Vulnerability feed

Vulnerability record · CVE-2021-3762 · published 3 March 2022

CVE-2021-3762: Redhat clair path traversal vulnerability

Redhat · Clair

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.

9.8 CVSS 3.1 Critical EPSS 4.8% · top 7.9% CWE-22 · Path traversal
9.8CVSS 3.1 base score, v2 7.5
4.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
12References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bugzilla.redhat.com/show_bug.cgi?id=2000795 Issue TrackingPatchThird Party Advisory
https://github.com/quay/clair/pull/1379 PatchThird Party Advisory
https://github.com/quay/clair/pull/1380 PatchThird Party Advisory
https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821 PatchThird Party Advisory
https://github.com/quay/claircore/pull/478 PatchThird Party Advisory
https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83 ExploitThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2000795 Issue TrackingPatchThird Party Advisory
https://github.com/quay/clair/pull/1379 PatchThird Party Advisory
https://github.com/quay/clair/pull/1380 PatchThird Party Advisory
https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821 PatchThird Party Advisory
https://github.com/quay/claircore/pull/478 PatchThird Party Advisory
https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83 ExploitThird Party Advisory

Track CVE-2021-3762 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2023-44487HTTP/2 Rapid Reset stream cancellation denial of serviceThe HTTP/2 protocol permits a client to cancel many streams quickly, and the server's handling of those resets consumes disproportionate resources. T…KEVEPSS 100%analysed9.8CVE-2026-123710Redhat quay vulnerabilityA flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token t…EPSS 0.66%9.0CVE-2020-27832Redhat quay cross-site scripting vulnerabilityA flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. Thi…EPSS 0.91%8.8CVE-2026-32590Redhat mirror registry for red hat openshift deserialization of untrusted data vulnerabilityA flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database u…EPSS 0.54%8.8CVE-2022-1227Podman project podman improper privilege management vulnerabilityA privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is d…EPSS 4.2%8.8CVE-2019-3864Redhat quay cross-site request forgery vulnerabilityA vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specific parameter which i…EPSS 0.44%8.7CVE-2026-29063Immutable-js immutable prototype pollution vulnerabilityImmutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immuta…EPSS 0.99%8.2CVE-2026-74243Redhat openshift update service missing authentication for critical function vulnerabilityA flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST reque…EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2021-3762), CISA KEV, FIRST EPSS (scores of 2026-11-13). This page is refreshed as NVD updates the record.