ZDI-CAN-27431 HIGH 7.5 Overdue Jul 11, 2025

Docker

Docker, the widely-used containerization platform, has a high-severity vulnerability (CVSS 7.5) that requires local access and high-level privileges to exploit, but can compromise confidentiality, integrity, and availability across system boundaries when successfully leveraged. The attack does not require user interaction, making it dangerous once an attacker with administrative or root-level access gains a foothold on a system running Docker. Security teams should monitor for privilege escalation attempts and unauthorized access to Docker daemon processes, particularly in environments where container isolation or user segregation may be weak.

Advisory Details
Researcher Discovered by: Nitesh Surana (niteshsurana.com) & Nelson William Gamazo Sanchez of Trend Research
Reported July 11, 2025
Deadline November 08, 2025 159d overdue
CVSS Vector AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy