ZDI-26-123: Docker Desktop MCP Server Cleartext Storage of Sensitive Information Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-123?
The severity of ZDI-26-123 is classified as a medium vulnerability due to the risk of sensitive information disclosure.
How do I fix ZDI-26-123?
To fix ZDI-26-123, update Docker Desktop to the latest version where the vulnerability has been addressed.
Who is affected by ZDI-26-123?
ZDI-26-123 affects users of Docker Desktop installations that allow local attackers to access sensitive information.
What type of vulnerability is ZDI-26-123?
ZDI-26-123 is a cleartext storage of sensitive information vulnerability, which can lead to data disclosure.
What are the potential impacts of ZDI-26-123?
The potential impacts of ZDI-26-123 include unauthorized access to sensitive data on compromised systems.