CVE-2025-9074— Docker Desktop 安全漏洞
Public Exploits 1
ExploitDB · 1 EDB-52472 [local]
Possible ATT&CK Techniques 3AI
T1496 · Resource Hijacking T1059 · Command and Scripting Interpreter T1610 · Deploy Container新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-9074の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Docker Desktop allows unauthenticated access to Docker Engine API from containers
ソース: CVE Program / CVE List V5
脆弱性説明
A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation (ECI) enabled, and with or without the "Expose daemon on tcp://localhost:2375 without TLS" option enabled. This can lead to execution of a wide range of privileged commands to the engine API, including controlling other containers, creating new ones, managing images etc. In some circumstances (e.g. Docker Desktop for Windows with WSL backend) it also allows mounting the host drive with the same privileges as the user running Docker Desktop.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
将资源暴露给错误范围
ソース: CVE Program / CVE List V5
脆弱性タイトル
Docker Desktop 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Docker Desktop是美国Docker公司的一个基于容器技术的用于轻量化部署应用的桌面软件。该产品可提供桌面环境可支持在Linux/Windows/Mac OS系统上创建一个容器（轻量级虚拟机）并部署和运行应用程序，以及通过配置文件实现应用程序的自动化安装、部署和升级。 Docker Desktop存在安全漏洞，该漏洞源于本地Linux容器可访问Docker Engine API，可能导致执行特权命令。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Docker | Docker Desktop | 4.25 ~ 4.44.3 | - |
II. CVE-2025-9074の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|---|---|---|
| 1 | None | https://github.com/zenzue/CVE-2025-9074 | POC詳細 |
| 2 | New vulnerability found in Docker. Credit for finding the vulnerability goes to Felix Boulet | https://github.com/j3r1ch0123/CVE-2025-9074 | POC詳細 |
| 3 | None | https://github.com/pucagit/CVE-2025-9074 | POC詳細 |
| 4 | Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access. | https://github.com/OilSeller2001/PoC-for-CVE-2025-9074 | POC詳細 |
| 5 | A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system. | https://github.com/BridgerAlderson/CVE-2025-9074-PoC | POC詳細 |
| 6 | Docker API CVE-2025-9074 PoC (Proof-Of-Concept). A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API endpoints with an integrated interactive command shell. | https://github.com/xwpdx0/poc-2025-9074 | POC詳細 |
| 7 | Proof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and macOS (CVSS 9.3) | https://github.com/PtechAmanja/CVE-2025-9074-Docker-Desktop-Container-Escape | POC詳細 |
| 8 | None | https://github.com/pppxo/CVE-2025-9074-PoC-Bash | POC詳細 |
| 9 | Proof-of-Concept exploit for CVE-2025-9074 | https://github.com/3rendil/CVE-2025-9074-POC | POC詳細 |
| 10 | The Ultimate DAEMON_KILLER. Control is an illusion. This Exploit forces CVE-2025-9074 to break the Docker cage. Advanced Container Escape & Root Escalation toolkit. Verify the vulnerability, take the host, destroy the logs. > We Are Fsociety_ | https://github.com/fsoc-ghost-0x/CVE-2025-9074_DAEMON_KILLER | POC詳細 |
| 11 | None | https://github.com/zaydbf/CVE-2025-9074-Poc | POC詳細 |
| 12 | 一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。 | https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit | POC詳細 |
| 13 | 🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers. | https://github.com/KvzinNcpx7/CVE-2025-9074_DAEMON_KILLER | POC詳細 |
| 14 | 🛠️ Exploit CVE-2025-9074 using this API exploitation framework designed for Docker environments, enhancing your security assessment capabilities. | https://github.com/KvzinNcpx7/kvzinncpx7.github.io | POC詳細 |
| 15 | 一个容器逃逸漏洞POC | https://github.com/x0da6h/POC-for-CVE-2025-9074 | POC詳細 |
| 16 | CVE-2025-9074: Docker Desktop LPE via Docker Engine API wo/ AuthN in posix sh | https://github.com/matesz44/CVE-2025-9074 | POC詳細 |
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-9074のインテリジェンス情報
请登录查看更多情报信息。
CVE-2025-9074 其他参考 (1)
IV. 関連脆弱性
同じ製品: Docker Desktop
- CVE-2026-8936
Unbounded recursion in grpcfuse kernel module allows contain - CVE-2026-5843
Docker Model Runner container-to-host code execution via MLX - CVE-2026-5817
Docker Model Runner container-to-host code execution via uns - CVE-2026-6406
Docker Desktop Enhanced Container Isolation bypass via --use - CVE-2026-2664
Out of bounds read vulnerability in grpcfuse kernel module
同じベンダー: Docker
- CVE-2026-18171
Docker Sandboxes read-only runtime mount writable through it - CVE-2026-12539
Docker Sandboxes ICMP egress restriction bypass after daemon - CVE-2026-12039
Docker Sandboxes network egress allowlist bypass via unfilte - CVE-2026-8936
Unbounded recursion in grpcfuse kernel module allows contain - CVE-2026-5843
Docker Model Runner container-to-host code execution via MLX
同じ弱点: CWE-668
- CVE-2026-72782
Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak - CVE-2026-72764
n8n before 1.123.67 Module Cache Poisoning via Code Node - CVE-2026-70606
Electron: ProtocolResponse.url reuses the default session ca - CVE-2026-54727
proot-distro has a Container Isolation Bypass via Crafted Re - CVE-2026-59835
Fortinet FortiSandbox 权限许可和访问控制问题漏洞
V. CVE-2025-9074へのコメント
まだコメントはありません