CVE-2016-7569: Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary...

Security readout for executives and security teams

CVE-2016-7569 affects docker2aci before 0.13.0. A malicious Docker image could include path traversal data that causes docker2aci to write files outside the intended extraction area during conversion. Business impact depends on whether the tool processes untrusted images, especially in automated build or container pipelines. Exposure is most likely where docker2aci versions before 0.13.0 convert Docker images from external, user-supplied, or otherwise untrusted sources. Systems only converting trusted internal images have lower practical exposure, but should still upgrade. Prioritize if docker2aci is in CI/CD, container intake, or customer-facing image conversion workflows. Otherwise treat as a cleanup item: verify whether the obsolete vulnerable tool exists and upgrade or remove it. Mitigation focus: Upgrade docker2aci to version 0.13.0 or later.; Avoid converting untrusted Docker images with vulnerable docker2aci versions.; Run image conversion in isolated, least-privileged environments..

Prepared

Jun 13, 2026, 12:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.