ZDI-26-150
HIGH 7.3
Published
Mar 03, 2026
Docker Desktop for Mac Docker Model Runner Exposed Dangerous Function Denial-of-Service Vulnerability
Docker
Docker Desktop contains a local denial-of-service vulnerability (CVE-2026-28400) that allows low-privileged attackers to crash or disable the application. An attacker with basic code execution capability on the host system can trigger this flaw to disrupt Docker services and availability. Security teams should prioritize updating Docker Desktop to the latest patched version and restrict local system access to trusted users only, given the HIGH severity rating.