CVE-2025-70819: Medium severity Zettlab D6 Ultra vulnerability
Published Sep 13, 2026
·Updated
Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file.
Affected Software
1 affected component
Zettlab D6 Ultra<1.7.0
Event History
Sep 13, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions are affected?
Zettlab D6 Ultra versions before 1.7.0 are affected.
2
What does an attacker need to exploit this issue?
The attacker needs the ability to provide or modify a Compose file used to create a container. The malicious volume definition uses repeated ".." path traversal segments to target host directories.
3
How can administrators check for attempted or existing exploitation?
Review Compose files and deployed container volume mappings for source paths containing repeated ".." segments, especially mappings that resolve to /etc. A mapping such as ../../../../../../../etc:/h_etc:rw can expose the host's passwd and shadow files inside the container.