ZDI 2026-04-15

ZDI-26-259: (0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Machine-generated analysis · WAYSCloud LLM

Local privilege escalation vulnerability in Docker Desktop for Windows requires escaping the container first. The ZDI assigned a CVSS score of 7.8.

Context

The vulnerability affects Docker Desktop for Windows. The source describes an incorrect permission assignment vulnerability in the cli-plugins component that allows local privilege escalation. The advisory notes that exploitation requires first escaping the container and executing code within the Docker Hyper-V VM.

Operator considerations

The source does not provide enough basis for specific operator guidance.

From Zero Day Initiative ↗

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. An attacker must first obtain the ability to escape the container and execute low-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8.

Read the full advisory on ZDI →