CVE-2022-37326

🗓️ 27 Apr 2023 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 95 Views🌐 WEB

Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-37326	28 Apr 202300:26	–	circl
CNNVD	Docker Desktop 安全漏洞	27 Apr 202300:00	–	cnnvd
Cvelist	CVE-2022-37326	27 Apr 202300:00	–	cvelist
EUVD	EUVD-2022-39961	3 Oct 202520:07	–	euvd
NVD	CVE-2022-37326	27 Apr 202320:15	–	nvd
OSV	CVE-2022-37326	27 Apr 202320:15	–	osv
Prion	Privilege escalation	27 Apr 202320:15	–	prion
Positive Technologies	PT-2023-13527 · Docker · Docker Desktop For Windows	27 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-37326	23 May 202501:04	–	redhatcve
Vulnrichment	CVE-2022-37326	27 Apr 202300:00	–	vulnrichment

NVD

Node

docker desktopRange<4.6.0windows

Source	Link
cyberark	www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-2
docs	www.docs.docker.com/desktop/release-notes/

Parameter	Position	Path	Description	CWE
DaemonJSON	request body	/dockerBackendV2/windowscontainers/start	vulnerability allowing deletion/creation of arbitrary files via pidfile in WindowsContainerStartRequest DaemonJSON payload	CWE-863
WindowsContainerStartRequest	request body	/dockerBackendV2/windowscontainers/start	vulnerability allowing deletion/creation of arbitrary files via pidfile in WindowsContainerStartRequest DaemonJSON payload	CWE-863
pidfile	request body	/dockerBackendV2/windowscontainers/start	vulnerability allowing deletion/creation of arbitrary files via pidfile in WindowsContainerStartRequest DaemonJSON payload	CWE-863

17 Jun 2026 04:54Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8

EPSS0.00295

SSVC

CWE-863