The vulnerability in Docker Desktop for Windows arises from incorrect permission settings on folders used by the cli-plugins feature. An attacker must first break out of the container environment and run low-privileged code inside the Docker Hyper-V VM. Leveraging the permission misconfiguration, the attacker can escalate privileges and execute arbitrary code on the host system with the current user's rights. The vendor declined to issue a fix, arguing exploitation requires prior privileged access. The Zero Day Initiative assigned a CVSS score of 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). No patch or remediation has been publicly disclosed.

Successful exploitation allows local attackers who have already escaped the container to escalate their privileges on the host system running Docker Desktop for Windows. This can lead to arbitrary code execution with the current user's privileges, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires prior ability to execute code inside the Docker Hyper-V VM, limiting the attack surface.

No official patch or fix is currently available as the vendor rejected the report. The advisory recommends restricting interaction with Docker Desktop to trusted users as the primary mitigation strategy. Users should limit access to the Docker environment and monitor for attempts to escape containers. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.