Privilege escalation in Docker Desktop
CVE-2025-10657
In a hardened Docker environment, with Enhanced Container Isolation ( ECI https://docs.docker.com/enterprise/security/hardened-desktop/enhanced-container-isolation/ ) enabled, an administrator can utilize the command restrictions feature…
Vulnerability class: Privilege Escalation
EPSS: 0.000 (5.7th percentile) — read the EPSS interpretation.
Affected products
- Docker Desktop — versions 4.46.0
Weakness classification (CWE)
References
- docs.docker.com/desktop/release-notes (release-notes)