CVE-2026-5843HOCH 8.6The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Pyth…
CVE-2026-5817HOCH 8.6The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, …
CVE-2026-6406HOCH 8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker…
CVE-2025-13743HOCH 7.5Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk…
CVE-2023-5166MITTEL 6.5Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.
This issue affects Docker Desktop: before 4.23.0.
…