CNNVD-202508-2370 Information
CNNVD ID
CNNVD-202508-2370
Related CVE
- CNNVD Published: 2025-08-20
Description (Chinese)
Docker Desktop是美国Docker公司的一个基于容器技术的用于轻量化部署应用的桌面软件。该产品可提供桌面环境可支持在Linux/Windows/Mac OS系统上创建一个容器（轻量级虚拟机）并部署和运行应用程序，以及通过配置文件实现应用程序的自动化安装、部署和升级。 Docker Desktop存在安全漏洞，该漏洞源于本地Linux容器可访问Docker Engine API，可能导致执行特权命令。
Description (English)
Docker Desktop is a container-based desktop software for light-quantitative deployment applications of the United States company Docker. The product provides a desktop environment that supports the creation of a container (lightweight virtual machine) on the Linux/Windows/Mac OS system and the deployment and operation of applications, as well as the automated installation, deployment and upgrading of applications through configuration files. There is a security loophole in Docker Desktop, which originates from local Linux containers with access to Docker Engineering API, which may result in the execution of a privilege order.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
Docker
Published
2025-08-20
Last Modified
2026-02-24
References
https://pvotal.tech/breaking-dockers-isolation-using-docker-cve-2025-9074/ https://blog.qwertysecurity.com/Articles/blog3.html https://docs.docker.com/desktop/release-notes/#4443 https://nvd.nist.gov/vuln/detail/CVE-2025-9074 https://www.exploit-db.com/exploits/52472 https://vigilance.fr/vulnerability/Docker-Desktop-read-write-access-via-Container-48035
Patch
https://www.docker.com/products/docker-desktop/
Share on: