This vulnerability (ZDI-26-258) affects Docker Desktop for Windows, specifically the extension-manager component. It involves an exposed dangerous function that can be leveraged by a local attacker who already has high-privileged code execution within a container to escalate privileges on the host system. The vulnerability allows arbitrary code execution in the context of the current user, potentially leading to full compromise of the Docker Desktop environment. The vendor has not issued a fix and has rejected the report, stating the attack scenario requires prior privileged access and is outside their threat model. The Zero Day Initiative assigned a CVSS score of 8.2, indicating high severity.

Successful exploitation allows a local attacker with high-privileged code execution inside a container to escalate privileges on the host running Docker Desktop for Windows. This can lead to arbitrary code execution with the current user's privileges, potentially compromising the host system. However, exploitation requires prior elevated access within the container, limiting the attack surface.

No official patch or fix is currently available as the vendor has rejected the report. The recommended mitigation is to restrict access and interaction with Docker Desktop to trusted users and environments only. Avoid running untrusted code or containers with elevated privileges to reduce the risk of exploitation.