🔐 CVE Alert

CVE-2026-112917

UNKNOWN 0.0

Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-based backends are unaffected. The issue is fully fixed only with Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 or later running on an older WSL remains affected.

CWE CWE-424
Vendor docker
Product docker desktop
Ecosystems
Industries
Technology
Published Nov 3, 2026
Stay Ahead of the Next One

Get instant alerts for docker docker desktop

Be the first to know when new unknown vulnerabilities affecting docker docker desktop are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Docker / Docker Desktop
All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗
docs.docker.com: https://docs.docker.com/desktop/release-notes/#4980 github.com: https://github.com/microsoft/WSL/releases/tag/3.0.3 github.com: https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1

Credits

Oryam Halachmi of Deune Tevel Halachmi of Deune