CVE-2025-15558: Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user.
This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/manager https://pkg.go.dev/github.com/docker/cli@v29.1.5+incompatible/cli-plugins/manager package, such as Docker Compose.
This issue does not impact non-Windows binaries, and projects not using the plugin-manager code.
Other sources
This issue affects Docker CLI through 29.1.5
Impact
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user.
This issue affects Docker CLI through v29.1.5 (fixed in v29.2.0). It impacts Windows binaries acting as a CLI plugin manager via the github.com/docker/cli/cli-plugins/manager package, which is consumed by downstream projects such as Docker Compose.
Docker Compose became affected starting in v2.31.0, when it incorporated the relevant CLI plugin manager code (see https://github.com/docker/compose/pull/12300), and is fixed in v5.1.0.
This issue does not impact non-Windows binaries or projects that do not use the plugin manager code.
Patches
Fixed version starts with 29.2.0
This issue was fixed in https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa (https://github.com/docker/cli/pull/6713), which removed %PROGRAMDATA%\Docker\cli-plugins from the list of paths used for plugin-discovery on Windows.
Workarounds
None
Resources
- Pull request: "cli-plugins/manager: remove legacy system-wide cli-plugin path" (https://github.com/docker/cli/pull/6713) - Patch: https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa.patch
Credits
Nitesh Surana (niteshsurana.com) of Trend Research of TrendAI
— GitHub
This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the plugins directory path. The product executes a program from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the target user.
— ZDI
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
go/github.com/docker/compose/v5to a version that resolves this vulnerability.Fixed in 5.1.0 - Upgrade
Upgrade
go/github.com/docker/clito a version that resolves this vulnerability.Fixed in 29.2.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 29.2.0 - Compensating control
On Windows, ensure the plugin discovery path C:\ProgramData\Docker\cli-plugins is not accessible for creation/modification by low-privileged users (the issue is that Docker CLI plugin binaries in C:\ProgramData\Docker\cli-plugins are executed).
- Operational
If any malicious CLI plugin binaries may have been placed in C:\ProgramData\Docker\cli-plugins, remove them and verify Docker Desktop / Docker CLI plugin inventory before use after upgrading.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15558?
CVE-2025-15558 is classified as a local privilege escalation vulnerability with low severity.
How do I fix CVE-2025-15558?
To remediate CVE-2025-15558, upgrade to Docker CLI version 29.2.0 or higher.
Who is affected by CVE-2025-15558?
CVE-2025-15558 affects Docker CLI versions up to and including 29.1.5 on Windows.
What can an attacker do with CVE-2025-15558?
An attacker exploiting CVE-2025-15558 could execute arbitrary code with elevated privileges by placing malicious binaries in a specific directory.
Is there a workaround for CVE-2025-15558?
A possible workaround for CVE-2025-15558 is to ensure the C:\ProgramData\Docker\cli-plugins directory does not exist.