CNNVD-202509-4045 Information
CNNVD ID
CNNVD-202509-4045
Related CVE
- CNNVD Published: 2025-09-26
Description (Chinese)
Docker Desktop是美国Docker公司的一个基于容器技术的用于轻量化部署应用的桌面软件。该产品可提供桌面环境可支持在Linux/Windows/Mac OS系统上创建一个容器（轻量级虚拟机）并部署和运行应用程序，以及通过配置文件实现应用程序的自动化安装、部署和升级。 Docker Desktop 4.46.0版本存在安全漏洞，该漏洞源于命令限制配置被忽略，可能导致执行任意Docker命令。
Description (English)
Docker Desktop is a container-based desktop software for light-quantitative deployment applications of the United States company Docker. The product provides a desktop environment that supports the creation of a container (lightweight virtual machine) on the Linux/Windows/Mac OS system and the deployment and operation of applications, as well as the automated installation, deployment and upgrading of applications through configuration files. There is a security loophole in Docker Desktop 4.46.0, which stems from the neglect of the command-restricted configuration and may result in the execution of any Docker order.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Docker
Published
2025-09-26
Last Modified
2026-02-24
References
https://docs.docker.com/desktop/release-notes https://access.redhat.com/security/cve/cve-2025-10657
Patch
https://docs.docker.com/desktop/release-notes
Share on: