Docker Compose users need to upgrade to v2.40.2 immediately to patch CVE-2025-62725, a high-severity path traversal vulnerability (8.9 rating) that allows attackers to write arbitrary files on the host system through malicious OCI artifacts. The flaw exploited Compose's trust in layer annotations without path validation.
Sort: