CVE-2026-6406— Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Docker | Docker Desktop | 4.41.0< 4.59.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-6406
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker socket mount via the HostConfig.Mounts field rather than the HostConfig.Binds field. The ECI enforcement in the Docker Desktop API proxy only inspected Binds, allowing the mount to pass unchecked. This grants a container full access to the Docker Engine socket and, if the host user has logged in to container registries, their authentication credentials. A local attacker with the ability to run Docker CLI commands can exploit this to escape ECI restrictions, access the Docker Engine, and potentially escalate privileges.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不正确
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Docker | Docker Desktop | 4.41.0 ~ 4.59.0 | - |
II. Public POCs for CVE-2026-6406
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-6406
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-6406 (1)
- 🔗 ZDI-26-299 | Zero Day Initiativethird-party-advisory
Other References for CVE-2026-6406 (1)
- https://docs.docker.com/desktop/release-notes/#4590release-notes
Same Patch Batch · Docker · 2026-05-22 · 3 CVEs total
| CVE-2026-5817 | 8.2 HIGH | Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in |
| CVE-2026-5843 | 8.2 HIGH | Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loadi |
IV. Related Vulnerabilities
Same product: Docker Desktop
- CVE-2026-5843
Docker Model Runner container-to-host code execution via MLX - CVE-2026-5817
Docker Model Runner container-to-host code execution via uns - CVE-2026-2664
Out of bounds read vulnerability in grpcfuse kernel module - CVE-2025-14740
Docker Desktop for Windows Incorrect Permission Assignment P - CVE-2025-13743
Expired Personal Access Tokens (PATs) are recorded in Docker
Same vendor: Docker
- CVE-2026-5843
Docker Model Runner container-to-host code execution via MLX - CVE-2026-5817
Docker Model Runner container-to-host code execution via uns - CVE-2026-33990
Docker Model Runner OCI Registry Client Vulnerable to Server - CVE-2025-15558
Docker Desktop Docker Plugins Uncontrolled Search Path Eleme - CVE-2026-28400
Docker Model Runner Unauthenticated Runtime Flag Injection v
Same weakness: CWE-863
- CVE-2026-48064
pam_usb: PAM_RHOST check skipped when deny_remote=false allo - CVE-2026-45108
Himmelblau: Authentication Bypass via Cross-User Local Sessi - CVE-2026-6713
Incorrect Authorization in GitLab - CVE-2026-45081
Frappe HR: Permission Bypass in HRMS Leave Details API - CVE-2026-45718
Budibase: Row Action Trigger Bypasses View Row Filter Securi
V. Comments for CVE-2026-6406
No comments yet