Docker Desktop logs can expose the Docker Hub access token

Bake filesystem path entitlements approval can be skipped in some multi-target builds

Bake filesystem path entitlements approval can be skipped for path using basename prefix

Docker Sandboxes host Git executes repository-controlled programs

Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

Docker Desktop logs can expose stored third-party credentials

Docker Hub account conversion could reassign an active personal access token to another user

Docker Desktop for Windows installer failed to verify external packages

Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

Docker Engine insecure-registry fallback via malicious DNS responses

Blind VXLAN injection into encrypted overlay networks from cluster peer

Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway

Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

Tar extraction in moby/go-archive can write outside the destination directory via link following

Docker Sandboxes read-only runtime mount writable through its shared-export alias

Docker Sandboxes ICMP egress restriction bypass after daemon restart

Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution

Docker: `PUT /containers/{id}/archive` executes container binary on the host

Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag

Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)

Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint

Out of bounds read vulnerability in grpcfuse kernel module