ZDI-26-259
HIGH 7.8
Published
Apr 15, 2026
Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Docker
This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. An attacker must first obtain the ability to escape the container and execute low-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.