CVE-2026-5817
🗓️ 22 May 2026 19:24:15Reported by DockerType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 81 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | Exploit for CVE-2026-5817 | 22 May 202616:30 | – | githubexploit |
 | CVE-2026-5817 | 22 May 202619:24 | – | attackerkb |
 | vllm-metal inference backend Component Code Execution | 3 Aug 202600:00 | – | bdu_fstec |
 | CVE-2026-5817 | 20 May 202614:10 | – | circl |
 | Docker Model Runner 安全漏洞 | 22 May 202600:00 | – | cnnvd |
 | CVE-2026-5817 Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends | 22 May 202619:24 | – | cvelist |
 | Docker Desktop < 4.68.0 Container Escape (CVE-2026-5817) | 22 May 202600:00 | – | nessus |
 | EUVD-2026-31493 | 22 May 202619:24 | – | euvd |
 | CVE-2026-5817 | 9 Oct 202616:38 | – | kitploit |
| CVE-2026-5817-PoC | 11 Oct 202619:12 | – | kitploit |
10
Node
AND
[
{
"vendor": "Docker",
"product": "Docker Desktop",
"platforms": [
"MacOS"
],
"versions": [
{
"status": "affected",
"version": "4.62.0",
"lessThan": "4.68.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]| Source | Link |
|---|---|
| docs | www.docs.docker.com/desktop/release-notes/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| name | request body | /api/pull | Model Runner pulls a model from an attacker-controlled OCI registry without digest verification, stores it locally, and the backend loads it with trust_remote_code enabled, allowing arbitrary code execution on the host during inference. | CWE-829 |
| model | request body | /engines/v1/chat/completions | Inference request triggers loading of a malicious model that causes untrusted Python code to be executed via tokenizer import due to trust_remote_code in the backend, enabling host RCE. | CWE-829 |
| messages | request body | /engines/v1/chat/completions | Inference request triggers loading of a malicious model that causes untrusted Python code to be executed via tokenizer import due to trust_remote_code in the backend, enabling host RCE. | CWE-829 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Jul 2026 11:10Current
8.4High risk
Vulners AI Score8.4
CVSS 3.18.2 - 8.6
CVSS 48.8
EPSS0.00184
SSVC