Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSO...

CVE-2022-37326 · published 3 years ago
Summary

Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation.

What to do
  • Update docker desktop to version 4.6.0 or later.
Affected software
VendorProductAffected versions
docker desktop < 4.6.0
cpe:2.3:a:docker:desktop:*:*:*:*:windows:*:*:*
Original advisory text
Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSO...
Docker Desktop for Windows before 4.6.0 allows attackers to delete (or create) any file through the dockerBackendV2 windowscontainers/start API by controlling the pidfile field inside the DaemonJSON field in the WindowsContainerStartRequest class. This can indirectly lead to privilege escalation.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-863Incorrect Authorization
Timeline
Published27 Apr 2023
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-37326 · NVD
Track software like this
Free during beta