Endpoint VulnerabilityDocker Desktop CVE-2025-9074 Authorization Bypass Vulnerability
Description
Local Linux containers can reach the Docker Engine API on 192.168.65.7:2375, enabling privileged commands such as container control, image management, and host drive mounting on Docker Desktop (WSL backend).
Affected Applications
Docker Desktop
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2025-08-28 | 1.00903 |
New
|
Docker Desktop |
| ID | 6232 |
| Created | Aug 28, 2025 |
| Description Updated |
Jan 16, 2026 |
| CVE ID | |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | Docker |
| Patch | manual |
| Application | Docker Desktop |