What is the CVSS score of CVE-2025-12744?

CVE-2025-12744 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Docker are affected by CVE-2025-12744?

CVE-2025-12744 is a critical privilege escalation vulnerability in ABRT daemon that allows unprivileged local users to execute arbitrary commands as root.. A patch is available.

Is there a public PoC exploit available for CVE-2025-12744?

Yes, a public proof-of-concept exploit is available for CVE-2025-12744. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-12744?

Within 24 hours: Identify all systems running ABRT daemon and assess exposure to local user access; disable ABRT if operationally feasible or restrict daemon permissions. Within 7 days: Implement compensating controls including disabling docker inspect functionality in ABRT, applying file permission restrictions to mount information sources, and monitoring for exploitation attempts. Within 30 days: Establish continuous monitoring for vendor patch availability and prepare immediate deployment procedures; conduct security audit of affected systems for signs of compromise.

Docker CVE-2025-12744

EUVD-2025-200735 HIGH

OS Command Injection (CWE-78)

2025-12-03 patrick@puiterwijk.org

Docker Command Injection Red Hat Suse

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SUSE

HIGH

qualitative

Red Hat

8.8 HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 16:14 euvd

EUVD-2025-200735

Analysis Generated

Mar 15, 2026 - 16:14 vuln.today

CVE Published

Dec 03, 2025 - 09:15 nvd

HIGH 8.8

DescriptionCVE.org

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.

Analysis

Technical ContextAI

Command injection allows an attacker to execute arbitrary OS commands on the host system through a vulnerable application that passes user input to system shells. This vulnerability is classified as OS Command Injection (CWE-78).

RemediationAI

Avoid passing user input to system commands. Use language-specific APIs instead of shell commands. If unavoidable, use strict input validation and escaping.