CVE-2026-6406 Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

EUVD-2026-31484

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...

CVE-2026-6406

CVE-2026-6406 describes a local privilege-escalation in Docker Desktop via Enhanced Container Isolation (ECI). When ECI is enabled, container-originated Docker socket mounts are denied unless explicitly allowed; however, the Docker CLI flag --use-api-socket mounts the Docker socket using HostConf...

Exploit for CVE-2026-5817

CVE-2026-5817: Docker Model Runner container-to-host RCE / Esc...

Docker Desktop 安全漏洞

Docker Desktop is a desktop software by the American company Docker, based on container technology, designed for lightweight application deployment. This product provides a desktop environment that allows creating containers lightweight virtual machines on Linux/Windows/Mac OS systems, as well as...

PT-2026-42831

Name of the Vulnerable Software and Affected Versions Docker Model Runner on macOS affected versions not specified Description The MLX inference backend uses the MLX-LM library, which imports and executes arbitrary Python files from model directories via the model file configuration field in the...

Docker Desktop < 4.71.0 Container Escape (CVE-2026-5843)

The version of Docker Desktop installed on the remote host is prior to 4.71.0. It is, therefore, affected by a container escape vulnerability: - A container-to-host code execution vulnerability exists in the Docker Model Runner MLX inference backend. An attacker with access to a container could...

Docker Model Runner 安全漏洞

Docker Model Runner is an open-source Docker model runner developed by Docker. There is a security vulnerability in Docker Model Runner MLX. This vulnerability stems from the unconditional import and execution of any Python file in the model directory. It may allow malicious models to be pulled...

Docker Model Runner 安全漏洞

Docker Model Runner is an open-source Docker model runner developed by Docker. Docker Model Runner vllm-metal contains a security vulnerability. This vulnerability arises from setting trustremotecode=True without any sandbox protection. It may allow arbitrary Python files to be executed during...

PT-2026-42830

Name of the Vulnerable Software and Affected Versions Docker Model Runner on macOS affected versions not specified Description The vllm-metal inference backend unconditionally sets trust remote code=True when loading model tokenizers and operates without sandboxing. This allows the...

Docker Desktop < 4.68.0 Container Escape (CVE-2026-5817)

The version of Docker Desktop installed on the remote host is prior to 4.68.0. It is, therefore, affected by a container escape vulnerability: - A container-to-host code execution vulnerability exists in the Docker Model Runner vllm-metal inference backend. An attacker with access to a container...

Critical Photon OS Security Update - PHSA-2026-5.0-90-0855

Updates of 'python3-idna', 'glibc', 'containerd', 'go', 'docker', 'libvirt', 'glib', 'rubygem-addressable', 'libxml2', 'gtk3' packages of Photon OS have been released...

MAL-2026-4228 Malicious code in @tiledesk/tiledesk-server (npm)

@tiledesk/tiledesk-server version 2.18.12 is a compromised release of the legitimate Tiledesk customer support platform package. This version was injected with a CI pipeline backdoor as part of the megalodon campaign — a mass GitHub repository backdooring operation targeting CI/CD runner...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: pypy-3.10, open-webui, kubeflow-volumes-web-app, datadog-agent, py3-cassandra-medusa, semgrep, kubeflow-pipelines, airflow, kserve, py3-pip, jwt-tool, confluent-docker-utils, dask-kubernetes, ggshield, py3-pipenv, kubeflow-katib, kubeflow-jupyter-web-app, pypy-3.11,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: pypy-3.10, open-webui, kubeflow-volumes-web-app, datadog-agent, py3-cassandra-medusa, semgrep, kubeflow-pipelines, airflow, kserve, py3-pip, jwt-tool, confluent-docker-utils, dask-kubernetes, ggshield, py3-pipenv, kubeflow-katib, kubeflow-jupyter-web-app, pypy-3.11,...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: crossplane-function-pythonic, localstack, kserve, request-1276, synapse, kubeflow-katib, metaflow-service-fips, apache-beam-python-3.13-sdk, lmcache-cuda-12.8, authentik-fips, pgadmin4-fips, tensorflow-cpu-jupyter, dbt-snowflake, datadog-agent-fips,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: crossplane-function-pythonic, localstack, kserve, request-1276, synapse, kubeflow-katib, metaflow-service-fips, apache-beam-python-3.13-sdk, lmcache-cuda-12.8, authentik-fips, pgadmin4-fips, tensorflow-cpu-jupyter, dbt-snowflake, datadog-agent-fips,...

ai-pentest-lab

AI Pentest Lab Demo de segurança ofensiva com IA para palestr...

Security update for docker

This update for docker rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: Basesystem Module 15-S...