Skip to content
OpenAdvisories

Vendor

Docker

62 known vulnerabilities.

Products

Docker Desktop 33 Docker Sandboxes 11 Docker Engine 5 Docker Buildx 4 Compose 2 model-runner 2 mcp-gateway 2 Docker CLI 2 CS Docker Engine 2 docker-credential-helpers 1 Docker Hub 1 Docker Compose 1 buildx 1 cli 1 docker/daemon 1 Docker Engine overlay network driver 1 Desktop 0 Sandboxes 0
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-105445 Public exploit

    Docker Hub account conversion could reassign an active personal access token to another user

    An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the …

    Docker Docker Hub
  • Critical 9.4
    CVE-2026-77179 Public exploit

    Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

    On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbit…

    Docker Docker Sandboxes
  • High 7.1
    CVE-2026-17106 Public exploit

    Tar extraction in moby/go-archive can write outside the destination directory via link following

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical str…

    Docker moby Docker Desktop Docker Sandboxes Debian Ubuntu Go
  • High 7.2
    CVE-2026-41567 Public exploit

    Docker: `PUT /containers/{id}/archive` executes container binary on the host

    Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or piped through `docker cp -`, the daemon resolves de…

    Docker moby Docker Engine moby/v2/daemon Debian Ubuntu Alpine Go
  • High 8.2
    CVE-2026-5843 Public exploit

    Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

    The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.json speci…

    Docker Docker Desktop
  • High 8.2
    CVE-2026-5817 Public exploit

    Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

    The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary P…

    Docker Docker Desktop
  • Critical 9.3
    CVE-2025-9074 Public exploit

    Docker Desktop allows unauthenticated access to Docker Engine API from containers

    A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolati…

    Docker Docker Desktop