CVE-2026-102332

Name of the Vulnerable Software and Affected Versions Dozzle versions prior to 11.1.2

Description Insufficient sanitization of container display names occurs when building ZIP archive entry names in the log download endpoint. Attackers with the ability to label containers can employ path traversal sequences—a technique used to access files and directories outside the intended folder—to write files outside the extraction directory when users download and extract logs.

Recommendations Update to version 11.1.2 or later.