Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Docker Desktop | — | Upgrade Docker Desktop to the latest version | Nov 3, 2025 | Apr 27, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub