ZDI 2026-03-03

ZDI-26-150: Docker Desktop for Mac Docker Model Runner Exposed Dangerous Function Denial-of-Service Vulnerability

CVE-2026-28400

Machine-generated analysis · WAYSCloud LLM

The vulnerability resides in Docker Desktop for Mac's Docker Model Runner, which exposes a function that can be triggered by local attackers to cause a denial-of-service condition.

Context

Docker Desktop for Mac is affected, specifically the Docker Model Runner component. The vulnerability is a denial-of-service condition that can be exploited by local attackers who have already gained the ability to execute low-privileged code on the guest system. The advisory notes that prior access is required, indicating the attack surface is limited to already-compromised environments. Worth noting is that the CVSS score reflects the requirement for local access and the impact on availability.

Operator considerations

Check: Determine if Docker Desktop for Mac is installed and in use on systems where local access is not tightly controlled.

From Zero Day Initiative ↗

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-28400.

Read the full advisory on ZDI →