VulnerabilityPublished 15 Apr 2026

ZDI-26-259: (0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Source Zero Day Initiative

Severity

High

Rated High by Zero Day Initiative

Data as of 26 May 2026, 20:33 UTC

What to do

AI-suggested

The advisory recommends restricting interaction with Docker Desktop to trusted users as the primary mitigation strategy. Users should limit access to the Docker environment and monitor for attempts to escape containers.

Description

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. An attacker must first obtain the ability to escape the container and execute low-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.

Impact

Successful exploitation allows local attackers who have already escaped the container to escalate their privileges on the host system running Docker Desktop for Windows. This can lead to arbitrary code execution with the current user's privileges, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires prior ability to execute code inside the Docker Hyper-V VM, limiting the attack surface.

Summary

The vulnerability in Docker Desktop for Windows arises from incorrect permission settings on folders used by the cli-plugins feature. An attacker must first break out of the container environment and run low-privileged code inside the Docker Hyper-V VM. Leveraging the permission misconfiguration, the attacker can escalate privileges and execute arbitrary code on the host system with the current user's rights. The vendor declined to issue a fix, arguing exploitation requires prior privileged access. The Zero Day Initiative assigned a CVSS score of 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

References

zerodayinitiative.com/advisories/ZDI-26-259/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 26 May 2026, 20:13 UTC

References

Community reviews

Related threats