Skip to content
OpenAdvisories

Product · Docker

Docker Desktop

33 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-17106 Public exploit

    Tar extraction in moby/go-archive can write outside the destination directory via link following

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical str…

    Docker moby Docker Desktop Docker Sandboxes Debian Ubuntu Go
  • High 8.2
    CVE-2026-5843 Public exploit

    Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

    The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.json speci…

    Docker Docker Desktop
  • High 8.2
    CVE-2026-5817 Public exploit

    Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

    The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary P…

    Docker Docker Desktop
  • Critical 9.3
    CVE-2025-9074 Public exploit

    Docker Desktop allows unauthenticated access to Docker Engine API from containers

    A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolati…

    Docker Docker Desktop