CVE-2018-15664

CVE-2018-15664 is a critical symlink-exchange vulnerability with directory traversal in Docker through version 18.06.1-ce-rc2, specifically impacting the 'docker cp' command. This flaw allows an attacker to gain arbitrary read-write access to the host filesystem with root privileges due to improper archive operations. With a CVSS score of 7.5 (High), exploitation requires local access, high attack complexity, and user interaction, but can lead to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness of its potential impact.