CVE-2025-9074 is a critical vulnerability in Docker Desktop that allows local Linux containers to access the Docker Engine API, even with enhanced isolation enabled. This unauthenticated access enables attackers to execute privileged commands, control other containers, and potentially mount host drives with user privileges, particularly on Windows with WSL. With a CVSS score of 9.3 (CRITICAL), the vulnerability has a low attack complexity and can lead to high impact on confidentiality, integrity, and availability. While not yet in CISA KEV, an ExploitDB entry exists, and the vulnerability has garnered significant community discussion and media coverage, indicating high awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.25, < 4.44.3CPE match | cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.9 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 1.2 GitHub mentions.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.3 Security Researcher mentions.
Remediation records are not available for this CVE.