ZDI-CAN-23513: ZDI-25-306: Docker Desktop Helper Service Link Following Local Privilege Escalation Vulnerability

Published May 21, 2025

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-5652.

Affected Software

1 affected component

Docker Docker Desktop

Event History

May 21, 2025

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-23513?

The severity of ZDI-CAN-23513 is rated at 7, indicating a high level of risk.

How do I fix ZDI-CAN-23513?

To fix ZDI-CAN-23513, update Docker Desktop to the latest version that addresses this vulnerability.

Who is affected by ZDI-CAN-23513?

ZDI-CAN-23513 affects installations of Docker Desktop on systems where local attackers can execute low-privileged code.

What type of vulnerability is ZDI-CAN-23513?

ZDI-CAN-23513 is a privilege escalation vulnerability.

What is required to exploit ZDI-CAN-23513?

An attacker must first obtain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-23513.