ZDI-26-152
HIGH 7.8
Published
Mar 06, 2026
Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Docker
Docker Desktop contains a local privilege escalation vulnerability (CVE-2025-15558) that allows attackers with low-level code execution access to gain elevated system privileges. An attacker must already have a foothold on the affected system to exploit this flaw, but successfully doing so grants them administrative control. Security teams should prioritize patching Docker Desktop installations and restrict local code execution access through proper user privilege management and access controls.