How severe is CVE-2025-54410?

CVE-2025-54410 has a CVSS 3.x base score of 3.3, rated low severity. It is exploitable over local access with high attack complexity, requires low privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.

Is CVE-2025-54410 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (5th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-54410?

CVE-2025-54410 affects Mobyproject Moby. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-54410?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-54410 have an EU (EUVD) identifier?

Yes. CVE-2025-54410 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-23166.

When was CVE-2025-54410 published?

CVE-2025-54410 was published on 2025-07-30 and last updated on 2026-06-17.

CVE-2025-54410

CVE-2025-54410 is a low-severity vulnerability in Mobyproject Moby with a CVSS 3.x base score of 3.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-909.

Key facts

Severity: Low (CVSS 3.x base score 3.3)
EPSS exploit prediction: 0% (5th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-23166
Weakness: CWE-909
Affected product: Mobyproject Moby
Published: 2025-07-30
Last modified: 2026-06-17

Description

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isolate bridge networks, allowing any container to access all ports on any other container across different bridge networks on the same host. This breaks network segmentation between containers that should be isolated, creating significant risk in multi-tenant environments. Only containers in --internal networks remain protected. Workarounds include reloading firewalld and either restarting the docker daemon, re-creating bridge networks, or using rootless mode. Maintainers anticipate a fix for this issue in version 25.0.13.

Frequently asked questions

What is CVE-2025-54410?: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isolate bridge networks, allowing any container to access all ports on any other container across different bridge networks on the same host. This breaks network segmentation between containers that should be isolated, creating significant risk in multi-tenant environments. Only containers in --internal networks remain protected. Workarounds include reloading firewalld and either restarting the docker daemon, re-creating bridge networks, or using rootless mode. Maintainers anticipate a fix for this issue in version 25.0.13.
How severe is CVE-2025-54410?: CVE-2025-54410 has a CVSS 3.x base score of 3.3, rated low severity. It is exploitable over local access with high attack complexity, requires low privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.
Is CVE-2025-54410 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (5th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-54410?: CVE-2025-54410 affects Mobyproject Moby. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-54410?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-54410 have an EU (EUVD) identifier?: Yes. CVE-2025-54410 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-23166.
When was CVE-2025-54410 published?: CVE-2025-54410 was published on 2025-07-30 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*

More vulnerabilities in Mobyproject Moby

CVE-2024-36623 — High (CVSS 8.1): moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger…
CVE-2023-28840 — High (CVSS 7.5): Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container…
CVE-2018-12608 — High (CVSS 7.5): An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both…
CVE-2026-42306 — High (CVSS 7.2): Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and…
CVE-2024-24557 — Medium (CVSS 6.9): Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system…
CVE-2023-28842 — Medium (CVSS 6.8): Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container…

All CVEs affecting Mobyproject Moby →

Other CWE-909 vulnerabilities

CVE-2022-22704 — Critical (CVSS 9.8): The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the…
CVE-2024-8178 — High (CVSS 8.8): The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing…
CVE-2021-29980 — High (CVSS 8.8): Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a…
CVE-2021-23994 — High (CVSS 8.8): A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This…
CVE-2020-11741 — High (CVSS 8.8): An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain…
CVE-2024-9780 — High (CVSS 7.8): ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file

Browse all CWE-909 vulnerabilities →