Docker CLI (<= 29.6.1)

A TOCTOU race condition in Docker CLI versions 29.6.1 and earlier allows malicious containers to perform arbitrary file writes on the host filesystem via the 'docker cp' command.