CVE-2025-15558

Docker Desktop vulnerability CVE-2025-15558 involves the Docker CLI for Windows. The CLI searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (e.g....