CVE-2026-106581— Docker Desktop for Windows installer failed to verify external packages
Quick assessment
Affected
Docker Docker Desktop
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 4.92.0 版本之前，Docker Desktop for Windows 未对通过 命令提供的安装包进行签名验证。攻击者若能提供精心构造的安装包，并诱使用户批准 Docker 签名的 UAC（用户账户控制）提示框，便能够以 LocalSystem（本地系统）权限执行由攻击者控制的安装程序操作。
Possible ATT&CK Techniques 2 AI
T1055.004 · Asynchronous Procedure Call T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Docker | Docker Desktop | < 4.92.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-106581
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Docker Desktop for Windows installer failed to verify external packages
Source: CVE Program / CVE List V5
Vulnerability Description
Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An attacker able to provide a crafted package and convince a user to approve the Docker-signed UAC prompt could execute attacker-controlled installer actions as LocalSystem.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
密码学签名的验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Docker | Docker Desktop | 0 ~ 4.92.0 |
cpe:2.3:a:docker:desktop:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-106581
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-106581
请登录查看更多情报信息。
Other References for CVE-2026-106581 (1)
-
https://docs.docker.com/desktop/release-notes/#4920 release-notes
IV. Related Vulnerabilities
Same product: Docker Desktop
-
CVE-2026-8936
Unbounded recursion in grpcfuse kernel module allows contain -
CVE-2026-5843
Docker Model Runner container-to-host code execution via MLX -
CVE-2026-5817
Docker Model Runner container-to-host code execution via uns -
CVE-2026-6406
Docker Desktop Enhanced Container Isolation bypass via --use -
CVE-2026-2664
Out of bounds read vulnerability in grpcfuse kernel module
Same vendor: Docker
-
CVE-2026-105452
Docker Sandboxes egress proxy could forward unrecognized cli -
CVE-2026-101998
Fail-open response masking in Docker Sandboxes can expose pr -
CVE-2026-105570
Docker Sandboxes OAuth response masking could be bypassed wi -
CVE-2026-92543
Docker Engine insecure-registry fallback via malicious DNS r -
CVE-2026-92542
Blind VXLAN injection into encrypted overlay networks from c
Same weakness: CWE-347
-
CVE-2026-86405
Payment Validation Bypass in Sipay Electronic Money's SanalP -
CVE-2026-85531
Payment Validation Bypass in Sipay Electronic Money's OpenCa -
CVE-2026-107724
fast-jwt treats raw public JWK JSON as an HMAC secret, enabl -
CVE-2026-107722
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace -
CVE-2026-14497
IBM DataPower Gateway Improper Verification of Cryptographic
V. Comments for CVE-2026-106581
No comments yet