ZDI-25-306: Docker Desktop Helper Service Link Following Local Privilege Escalation Vulnerability

Published May 21, 2025

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-5652.

Affected Software

1 affected component

Docker Docker Desktop

Event History

May 21, 2025

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-25-306?

The severity of ZDI-25-306 is rated at 7, indicating a high risk for privilege escalation in affected installations of Docker Desktop.

How do I fix ZDI-25-306?

To fix ZDI-25-306, ensure that you update Docker Desktop to the latest version provided by the vendor.

Who is affected by ZDI-25-306?

ZDI-25-306 affects installations of Docker Desktop that allow local attackers to escalate privileges.

What type of vulnerability is ZDI-25-306?

ZDI-25-306 is a privilege escalation vulnerability that requires an attacker to have low-privileged access to the system.

What should I do if I believe I am impacted by ZDI-25-306?

If you believe you are impacted by ZDI-25-306, immediately apply the necessary updates to mitigate the vulnerability.