ZDI-26-150 HIGH 7.3 Published Mar 03, 2026

Docker Desktop for Mac Docker Model Runner Exposed Dangerous Function Denial-of-Service Vulnerability

Docker

Docker Desktop contains a local denial-of-service vulnerability (CVE-2026-28400) that allows low-privileged attackers to crash or disable the application. An attacker with basic code execution capability on the host system can trigger this flaw to disrupt Docker services and availability. Security teams should prioritize updating Docker Desktop to the latest patched version and restrict local system access to trusted users only, given the HIGH severity rating.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy