WSL2

Critical Docker Desktop vulnerability could let attackers hijack Windows hosts, researchers say

Cybercrime, News, Vulnerabilities

August 26, 2025

A critical vulnerability in Docker Desktop for Windows and macOS could allow attackers to hijack the host by running a malicious container, even with Enhanced Container Isolation, tracked as CVE-2025-9074 (SSRF) and rated 9.3. The flaw has been patched in Docker Desktop 4.44.3, after demonstrations of a PoC that could access the Docker Engine from…