Description
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user.
This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/manager https://pkg.go.dev/github.com/docker/cli@v29.1.5+incompatible/cli-plugins/manager package, such as Docker Compose.
This issue does not impact non-Windows binaries, and projects not using the plugin-manager code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Docker | Docker CLI | — | 29.2.0 |
| Docker | Compose | — | 5.1.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | skaffold | 2.18.0-1.1 | openSUSE-SU-2026:10369-1 |
| openSUSE Tumbleweed | teleport | 17.7.23-1.1 | openSUSE-SU-2026:10684-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20260317T205859-150000.1.152.1 | SUSE-SU-2026:1042-1 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r45 | — |
| Wolfi rolling | argo-workflow-controller-4.0 | 4.0.1-r4 | — |
| Wolfi rolling | bento | 1.15.0-r3 | — |
| Wolfi rolling | cosign | 3.0.5-r2 | — |
| Wolfi rolling | crossplane-2.2 +1 | 2.2.0-r2 | — |
| Wolfi rolling | dagdotdev | 0.0.20-r4 | — |
| Wolfi rolling | datadog-agent-7.72 +2 | No fix yet | — |
| Wolfi rolling | dive | 0.13.1-r13 | — |
| Wolfi rolling | eksctl | 0.224.0-r1 | — |
| Wolfi rolling | flux-2.7 | 2.7.5-r9 | — |
| Wolfi rolling | flux-2.8 | 2.8.1-r2 | — |
| Wolfi rolling | flux-helm-controller | 1.5.1-r2 | — |
| Wolfi rolling | flux-image-reflector-controller | 1.1.0-r1 | — |
| Wolfi rolling | flux-kustomize-controller | 1.8.1-r2 | — |
| Wolfi rolling | flux-notification-controller | 1.8.1-r1 | — |
| Wolfi rolling | gh | 2.87.3-r1 | — |
| Wolfi rolling | gitsign | 0.14.0-r9 | — |
| Wolfi rolling | guac +2 | 1.0.1-r8 | — |
| Wolfi rolling | harbor-2.14 +1 | 2.14.2-r13 | — |
| Wolfi rolling | harbor-scanner-trivy | 0.34.2-r3 | — |
| Wolfi rolling | incert | 0.5.0-r10 | — |
| Wolfi rolling | istioctl-1.29 +2 | 1.29.0-r2 | — |
| Wolfi rolling | k3d | 5.8.3-r25 | — |
| Wolfi rolling | k3s +1 | 1.35.2.1-r1 | — |
| Wolfi rolling | k3s-1.32 +1 | 1.32.13.1-r1 | — |
| Wolfi rolling | k9s | 0.50.18-r6 | — |
| Wolfi rolling | kargo | 1.9.5-r3 | — |
| Wolfi rolling | katib-controller | 0.19.0-r6 | — |
| Wolfi rolling | kbld | 0.47.2-r1 | — |
| Wolfi rolling | knative-serving-1.21-controller | 1.21.1-r2 | — |
| Wolfi rolling | ko | 0.18.1-r4 | — |
| Wolfi rolling | kubescape-operator | 0.2.129-r2 | — |
| Wolfi rolling | kwokctl | 0.7.0-r10 | — |
| Wolfi rolling | kyverno-1.17 +5 | 1.17.1-r5 | — |
| Wolfi rolling | kyverno-notation-aws | 1.1-r38 | — |
| Wolfi rolling | lazydocker | 0.24.4-r2 | — |
| Wolfi rolling | manifest-tool | 2.2.1-r6 | — |
| Wolfi rolling | minio-operator | 7.1.1-r11 | — |
| Wolfi rolling | nerdctl | 2.2.1-r4 | — |
| Wolfi rolling | openbao | 2.5.1-r2 | — |
| Wolfi rolling | osv-scanner | 2.3.3-r5 | — |
| Wolfi rolling | paranoia | 0.5.0-r5 | — |
| Wolfi rolling | policy-controller +1 | 0.14.0-r4 | — |
| Wolfi rolling | rancher-fleet-cli +1 | 0.14.3-r3 | — |
| Wolfi rolling | rancher-system-agent | 0.3.14-r8 | — |
| Wolfi rolling | rke2-cloud-provider | 1.35.1-r4 | — |
| Wolfi rolling | scorecard | 5.4.0-r9 | — |
| Wolfi rolling | slsa-verifier | 2.7.1-r10 | — |
| Wolfi rolling | spire-agent | 1.14.2-r1 | — |
| Wolfi rolling | tekton-chains | 0.26.2-r2 | — |
| Wolfi rolling | teleport-18.6 +1 | 18.6.8-r3 | — |
| Wolfi rolling | traefik-3.6 | 3.6.9-r6 | — |
| Wolfi rolling | trivy | 0.69.3-r4 | — |
| Wolfi rolling | trivy-operator | 0.30.0-r6 | — |
| Wolfi rolling | trufflehog | 3.93.7-r3 | — |
| Wolfi rolling | vault-secrets-webhook | 1.22.2-r7 | — |
| Wolfi rolling | vcluster +2 | 0.32.1-r2 | — |
| Wolfi rolling | vendir | 0.45.2-r2 | — |
| Wolfi rolling | vexctl | 0.4.1-r12 | — |
| Wolfi rolling | vitess-23-binaries | 23.0.3-r4 | — |
| Wolfi rolling | witness | 0.10.2-r13 | — |
| Wolfi rolling | xeol | 0.10.8-r28 | — |
| Wolfi rolling | zot | 2.1.14-r6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/docker/cli | >= 19.03.0, < 29.2.0 | 29.2.0 | GHSA-p436-gjf2-799p |
| Go | github.com/docker/cli | < 29.2.0+incompatible | 29.2.0+incompatible | GO-2026-4610 |
| Go | github.com/docker/compose | all versions | — | GO-2026-4610 |
| Go | github.com/docker/compose/v2 | >= 2.31.0 | — | GO-2026-4610 |
| Go | github.com/docker/compose/v5 | < 5.1.0 | 5.1.0 | GO-2026-4610 |
Advisories 4
- openSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Jul 31, 2026
- openSUSE-SU-2026:10684-1 teleport-17.7.23-1.1 on GA media SUSE / openSUSE Security Updates · May 5, 2026
- SUSE-SU-2026:1042-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Mar 26, 2026
- openSUSE-SU-2026:10369-1 skaffold-2.18.0-1.1 on GA media SUSE / openSUSE Security Updates · Mar 14, 2026