An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.