PatchTheCVEdocker desktop vulnerabilities and fixes
Recent CVEs affecting docker desktop, with upgrade or downgrade steps. 3 tracked.
Also searched as: dockerdesktop.
docker desktop has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-05-22. Highest priority: CVE-2026-6406 (score 39/100).
- CVE-2026-6406 HIGH 8.8 UPGRADE The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Deskto
- CVE-2026-5817 HIGH 8.2 UPGRADE The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True w
- CVE-2026-5843 HIGH 8.2 UPGRADE The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally impor
FAQ
How do I fix docker desktop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is docker desktop being exploited right now?
None of the tracked docker desktop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which docker desktop CVE should I patch first?
CVE-2026-6406 currently ranks highest (39/100): The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Deskto.