ZDI-26-152 HIGH 7.8 Published Mar 06, 2026

Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Docker

Docker Desktop contains a local privilege escalation vulnerability (CVE-2025-15558) that allows attackers with low-level code execution access to gain elevated system privileges. An attacker must already have a foothold on the affected system to exploit this flaw, but successfully doing so grants them administrative control. Security teams should prioritize patching Docker Desktop installations and restrict local code execution access through proper user privilege management and access controls.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy