CVE-2026-5817

🗓️ 22 May 2026 19:24:15Reported by DockerType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 28 Views🌐 WEB

Docker Model Runner on macOS loads tokenizers with trust remote code, enabling code execution from models during inference.

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for CVE-2026-5817	22 May 202616:30	–	githubexploit
ATTACKERKB	CVE-2026-5817	22 May 202619:24	–	attackerkb
Circl	CVE-2026-5817	20 May 202614:10	–	circl
CNNVD	Docker Model Runner 安全漏洞	22 May 202600:00	–	cnnvd
Cvelist	CVE-2026-5817 Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends	22 May 202619:24	–	cvelist
Tenable Nessus	Docker Desktop < 4.68.0 Container Escape (CVE-2026-5817)	22 May 202600:00	–	nessus
EUVD	EUVD-2026-31493	22 May 202619:24	–	euvd
NVD	CVE-2026-5817	22 May 202620:16	–	nvd
Positive Technologies	PT-2026-42830	22 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-5817	26 May 202620:14	–	redhatcve

NVD

Node

docker docker_desktopRange4.62.0–4.68.0

AND

apple macosMatch-

[
  {
    "vendor": "Docker",
    "product": "Docker Desktop",
    "platforms": [
      "MacOS"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "4.62.0",
        "lessThan": "4.68.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
docs	www.docs.docker.com/desktop/release-notes/

Parameter	Position	Path	Description	CWE
name	request body	/api/pull	Pulling a malicious OCI model with trust_remote_code enabled can lead to arbitrary code execution during model loading.	CWE-829
model	request body	/engines/v1/chat/completions	Inference request causes the backend to load a model with trust_remote_code and import potentially hostile tokenizer code from the pulled model, enabling host RCE.	CWE-829
messages	request body	/engines/v1/chat/completions	Inference request causes the backend to load a model with trust_remote_code and import potentially hostile tokenizer code from the pulled model, enabling host RCE.	CWE-829

17 Jun 2026 10:59Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.2 - 8.6

CVSS 48.8

EPSS0.00224

SSVC

CWE-829