VulnerabilityPublished 23 Feb 2026

ZDI-26-123: Docker Desktop MCP Server Cleartext Storage of Sensitive Information Vulnerability

Source Zero Day Initiative

Severity

Medium

Rated Medium by Zero Day Initiative

Data as of 26 May 2026, 20:33 UTC

local

What to do

AI-suggested

The vendor advisory states the issue affects a beta version and does not assign a CVE. Users should avoid running the affected beta version or restrict local code execution privileges to trusted users only. Monitor the vendor advisory for any updates regarding official fixes or mitigations.

Description

This vulnerability allows local attackers to disclose sensitive information on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5.

Impact

Local attackers with low-privileged code execution can disclose sensitive information stored in plaintext by the MCP server in Docker Desktop beta versions. This disclosure could lead to credential exposure and subsequent compromise of the affected system or Docker environment. There is no indication of remote exploitation or denial of service. No known active exploitation has been reported.

Summary

The Docker Desktop MCP server contains a vulnerability where sensitive information, including credentials, is stored in plaintext. An attacker with the ability to execute low-privileged code locally can exploit this flaw to disclose these credentials, potentially leading to further compromise. The vulnerability is present in a beta version of Docker Desktop and has been publicly disclosed by the Zero Day Initiative with a CVSS score of 5.5. The vendor has indicated that this issue will not receive a CVE and impacts only beta software.

References

zerodayinitiative.com/advisories/ZDI-26-123/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 26 May 2026, 20:28 UTC

References

Community reviews

Related threats