https://vulnogram.org/ Most recent CVEs assigned by Docker Inc. (docker). https://vulnogram.org/seaview/icons/docker.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-105445 https://vulnogram.org/CVE-2026-105445 An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revo… Critical Cloud Hosted Tue, 13 Oct 2026 17:35:20 GMT https://vulnogram.org/CVE-2026-106581 https://vulnogram.org/CVE-2026-106581 Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An attacker able to provide a crafted package and convince a user to approve the Docker-signed UAC prompt c… High Fri, 09 Oct 2026 13:40:18 GMT https://vulnogram.org/CVE-2026-105452 https://vulnogram.org/CVE-2026-105452 Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized san… Medium Thu, 08 Oct 2026 18:49:37 GMT https://vulnogram.org/CVE-2026-101998 https://vulnogram.org/CVE-2026-101998 Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this… Medium Thu, 08 Oct 2026 18:47:28 GMT https://vulnogram.org/CVE-2026-105570 https://vulnogram.org/CVE-2026-105570 Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-var… Medium Thu, 08 Oct 2026 18:46:05 GMT https://vulnogram.org/CVE-2026-92543 https://vulnogram.org/CVE-2026-92543 Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a s… High Network Exploitable Wed, 07 Oct 2026 16:44:21 GMT https://vulnogram.org/CVE-2026-92542 https://vulnogram.org/CVE-2026-92542 The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node… Medium Wed, 07 Oct 2026 16:42:20 GMT https://vulnogram.org/CVE-2026-93321 https://vulnogram.org/CVE-2026-93321 A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. Medium Mon, 05 Oct 2026 22:00:54 GMT https://vulnogram.org/CVE-2026-93315 https://vulnogram.org/CVE-2026-93315 When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build. Medium Mon, 05 Oct 2026 21:57:08 GMT https://vulnogram.org/CVE-2026-103433 https://vulnogram.org/CVE-2026-103433 Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local O… Medium Network Exploitable Mon, 05 Oct 2026 21:54:44 GMT https://vulnogram.org/CVE-2026-93326 https://vulnogram.org/CVE-2026-93326 A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening.… Medium Mon, 05 Oct 2026 20:13:27 GMT https://vulnogram.org/CVE-2026-93323 https://vulnogram.org/CVE-2026-93323 The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhaus… Medium Mon, 05 Oct 2026 17:57:12 GMT https://vulnogram.org/CVE-2026-93322 https://vulnogram.org/CVE-2026-93322 A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. Medium Mon, 05 Oct 2026 17:53:50 GMT https://vulnogram.org/CVE-2026-93320 https://vulnogram.org/CVE-2026-93320 BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access. Medium Mon, 05 Oct 2026 17:50:44 GMT https://vulnogram.org/CVE-2026-93319 https://vulnogram.org/CVE-2026-93319 A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic. Medium Mon, 05 Oct 2026 17:47:22 GMT https://vulnogram.org/CVE-2026-93318 https://vulnogram.org/CVE-2026-93318 A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot identity without validating that they matched the actua… High Network Exploitable Mon, 05 Oct 2026 17:45:39 GMT https://vulnogram.org/CVE-2026-93317 https://vulnogram.org/CVE-2026-93317 An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising… Medium Network Exploitable Mon, 05 Oct 2026 17:43:44 GMT https://vulnogram.org/CVE-2026-93316 https://vulnogram.org/CVE-2026-93316 If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident. High Mon, 05 Oct 2026 17:42:12 GMT https://vulnogram.org/CVE-2026-79994 https://vulnogram.org/CVE-2026-79994 The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between val… High Tue, 15 Sep 2026 20:33:21 GMT https://vulnogram.org/CVE-2026-77179 https://vulnogram.org/CVE-2026-77179 On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or mod… Critical Tue, 15 Sep 2026 13:32:41 GMT https://vulnogram.org/CVE-2026-17106 https://vulnogram.org/CVE-2026-17106 The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using le… High Tue, 18 Aug 2026 18:35:13 GMT https://vulnogram.org/CVE-2026-18171 https://vulnogram.org/CVE-2026-18171 Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory stays writab… Medium Wed, 12 Aug 2026 14:47:24 GMT https://vulnogram.org/CVE-2026-15793 https://vulnogram.org/CVE-2026-15793 BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host. Medium Tue, 21 Jul 2026 16:10:21 GMT https://vulnogram.org/CVE-2026-15792 https://vulnogram.org/CVE-2026-15792 A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. Medium Tue, 21 Jul 2026 16:10:21 GMT https://vulnogram.org/CVE-2026-15791 https://vulnogram.org/CVE-2026-15791 A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory. Low Tue, 21 Jul 2026 16:10:20 GMT https://vulnogram.org/CVE-2026-15789 https://vulnogram.org/CVE-2026-15789 A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass… Medium Tue, 21 Jul 2026 16:10:20 GMT https://vulnogram.org/CVE-2026-15788 https://vulnogram.org/CVE-2026-15788 BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrar… Medium Mon, 20 Jul 2026 19:12:56 GMT https://vulnogram.org/CVE-2026-12539 https://vulnogram.org/CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon restarts, so a restart-surviving sandbox forwards ICMP to arbitrary host… Medium Thu, 18 Jun 2026 13:51:13 GMT https://vulnogram.org/CVE-2026-12039 https://vulnogram.org/CVE-2026-12039 Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host resolver whenever the network is internet-connected, without consulting… Medium Thu, 18 Jun 2026 13:48:14 GMT https://vulnogram.org/CVE-2026-8936 https://vulnogram.org/CVE-2026-8936 Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.… High Tue, 02 Jun 2026 21:09:03 GMT https://vulnogram.org/CVE-2026-5843 https://vulnogram.org/CVE-2026-5843 The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.j… High Fri, 22 May 2026 19:28:38 GMT https://vulnogram.org/CVE-2026-5817 https://vulnogram.org/CVE-2026-5817 The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute ar… High Fri, 22 May 2026 19:24:15 GMT https://vulnogram.org/CVE-2026-6406 https://vulnogram.org/CVE-2026-6406 The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. Howe… High Fri, 22 May 2026 18:32:15 GMT https://vulnogram.org/CVE-2025-15558 https://vulnogram.org/CVE-2025-15558 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, doc… High Wed, 04 Mar 2026 16:14:32 GMT https://vulnogram.org/CVE-2026-2664 https://vulnogram.org/CVE-2026-2664 An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entri… Medium Tue, 24 Feb 2026 10:09:18 GMT https://vulnogram.org/CVE-2025-14740 https://vulnogram.org/CVE-2025-14740 Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling of the C:\ProgramData\DockerDesktop directory. The installer creates this directory without proper ownership verification, creati… Medium Wed, 04 Feb 2026 13:57:23 GMT https://vulnogram.org/CVE-2025-13743 https://vulnogram.org/CVE-2025-13743 Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred. Low Tue, 09 Dec 2025 20:39:52 GMT https://vulnogram.org/CVE-2025-9164 https://vulnogram.org/CVE-2025-9164 Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads folder before checking system directories, allowing local privilege escalation through mali… High Mon, 27 Oct 2025 13:53:40 GMT https://vulnogram.org/CVE-2025-10657 https://vulnogram.org/CVE-2025-10657 In a hardened Docker environment, with Enhanced Container Isolation ( ECI https://docs.docker.com/enterprise/security/hardened-desktop/enhanced-container-isolation/ ) enabled, an administrator can utilize the command restrictions feature https://docs… High Fri, 26 Sep 2025 21:05:19 GMT https://vulnogram.org/CVE-2025-9074 https://vulnogram.org/CVE-2025-9074 A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Containe… Critical Wed, 20 Aug 2025 13:28:35 GMT https://vulnogram.org/CVE-2025-6587 https://vulnogram.org/CVE-2025-6587 System environment variables are recorded in Docker Desktop diagnostic logs, when using shell auto-completion. This leads to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to the… Medium Thu, 03 Jul 2025 10:03:27 GMT https://vulnogram.org/CVE-2025-3911 https://vulnogram.org/CVE-2025-3911 Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these lo… Medium Tue, 29 Apr 2025 17:20:34 GMT https://vulnogram.org/CVE-2025-4095 https://vulnogram.org/CVE-2025-4095 Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not be… Medium Tue, 29 Apr 2025 17:16:16 GMT https://vulnogram.org/CVE-2025-3224 https://vulnogram.org/CVE-2025-3224 A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories u… High Mon, 28 Apr 2025 19:21:15 GMT https://vulnogram.org/CVE-2025-0495 https://vulnogram.org/CVE-2025-0495 Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values ma… Medium Mon, 17 Mar 2025 19:21:11 GMT https://vulnogram.org/CVE-2025-1696 https://vulnogram.org/CVE-2025-1696 A vulnerability exists in Docker Desktop prior to version 4.39.0 that could lead to the unintentional disclosure of sensitive information via application logs. In affected versions, proxy configuration data—potentially including sensitive details—was… Medium Thu, 06 Mar 2025 11:58:43 GMT https://vulnogram.org/CVE-2024-10846 https://vulnogram.org/CVE-2024-10846 The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles while parsing YAML, such as used by Docker Compose from… Medium Thu, 23 Jan 2025 15:22:56 GMT https://vulnogram.org/CVE-2024-9348 https://vulnogram.org/CVE-2024-9348 Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view. High Network Exploitable Wed, 16 Oct 2024 14:50:06 GMT https://vulnogram.org/CVE-2024-8696 https://vulnogram.org/CVE-2024-8696 A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. High Network Exploitable Thu, 12 Sep 2024 17:54:34 GMT https://vulnogram.org/CVE-2024-8695 https://vulnogram.org/CVE-2024-8695 A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. Critical Network Exploitable Thu, 12 Sep 2024 17:52:55 GMT