docker github.com/docker/cli vulnerabilities

Latest docker github.com/docker/cli CVEs

Newest publication first

1. CVE-2025-15558 Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows

   Published 2026-03-10

   High·CVSS 7.0

   This issue affects Docker CLI through 29.1.5 Impact Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (d...

2. CVE-2021-41092 Docker CLI leaks private registry credentials to registry-1.docker.io

   Medium·CVSS 5.4

   Impact A bug was found in the Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file (typically ~/.docker/config.json) listing a credsStore or credHelpers that could not be executed would result in any provided credentials be...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.