The Docker CLI for Windows searches for CLI plugin binaries in the directory C:\ProgramData\Docker\cli-plugins, which is not created by default. This allows a low-privileged attacker to create this directory and place malicious executables named as common Docker CLI plugins (e.g., docker-compose.exe, docker-buildx.exe). When a victim user invokes Docker Desktop or Docker CLI plugin features, these malicious binaries may be executed. If the Docker CLI is run with elevated privileges, this can result in privilege escalation. This vulnerability affects Docker CLI versions up to 29.1.5 on Windows and involves the plugin-manager package. Non-Windows binaries and projects not using the plugin-manager are not affected.

An attacker with low privileges on a Windows system can exploit this vulnerability by creating a directory and placing malicious plugin binaries that the Docker CLI will execute. This can lead to execution of arbitrary code with the privileges of the Docker CLI process. If the Docker CLI is run as a privileged user, this can result in privilege escalation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should restrict write permissions to the C:\ProgramData\Docker directory to prevent unauthorized creation of the cli-plugins directory and placement of malicious binaries. Avoid running Docker CLI with elevated privileges unless necessary.