Docker vulnerabilities and fixes

CVEs that mention Docker, ranked by priority. 29 tracked.

Docker has 29 tracked vulnerabilities, 7 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 19. Most recent: 2026-10-23. Highest priority: CVE-2023-34844 (score 68/100).

• CVE-2023-34844 CRITICAL 9.8 UPGRADE Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.
• CVE-2026-53975 CRITICAL 9.8 OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attacker
• CVE-2026-71289 CRITICAL 9.8 The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose
• CVE-2026-73519 CRITICAL 9.8 WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and publ
• CVE-2026-69096 HIGH 8.8 OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC bac
• CVE-2026-66384 MEDIUM 5.3 EXPLOITED UPGRADE JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
• CVE-2026-66297 HIGH 8.0 UPGRADE Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in live
• CVE-2026-47752 CRITICAL 9.9 Tugtainer is a self-hosted app for automating updates of Docker containers
• CVE-2026-69259 HIGH 8.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
• CVE-2026-16503 CRITICAL 9.1 Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all i
• CVE-2026-114087 HIGH 8.1 Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/
• CVE-2026-52855 CRITICAL 9.9 Wings is the server control plane for Pterodactyl, a free, open-source game server management panel
• CVE-2026-106765 HIGH 7.5 An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleIma
• CVE-2026-72533 HIGH 8.8 An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged user
• CVE-2026-48080 HIGH 8.0 OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform
• CVE-2026-17626 HIGH 8.8 UPGRADE IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expos
• CVE-2026-16763 MEDIUM 5.3 A vulnerability was identified in localstack serverless-localstack up to 1.4.0
• CVE-2026-47873 HIGH 8.0 UPGRADE The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's n
• CVE-2026-47882 HIGH 8.3 UPGRADE When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or
• CVE-2026-115508 MEDIUM 6.5 Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker
• CVE-2026-54574 HIGH 8.2 proot-distro is a utility for managing proot containers
• CVE-2026-18171 MEDIUM 5.7 Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind onl
• CVE-2026-73087 LOW 2.3 Dozzle is a realtime log viewer for docker containers
• CVE-2026-54631 MEDIUM 6.3 Part-DB is an open source inventory management system for electronic components
• CVE-2026-12565 MEDIUM 5.3 The unarchive internal module's archive extraction commands perform no code-level validation on extracted file
• CVE-2026-115885 MEDIUM 4.1 The LangGraph CLI is the official command-line interface for LangGraph
• CVE-2026-76304 MEDIUM 4.3 In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Au
• CVE-2026-53759 LOW 2.0 linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations
• CVE-2025-65200 HIGH n/a An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content h

FAQ

How do I fix Docker vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Docker being exploited right now?

Yes: 1 Docker CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which Docker CVE should I patch first?

CVE-2023-34844 currently ranks highest (68/100): Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape..

← Back to latest CVEs