Alerts
Critical Vulnerability in Docker Desktop for Windows
27 August 2025
Docker has released security updates addressing a critical-severity vulnerability (CVE-2025-9074) in Docker Desktop for Windows. Users and administrators are advised to update to the latest version immediately.
Background
Docker has released security updates addressing a critical-severity vulnerability (CVE-2025-9074) in Docker Desktop for Windows.
Impact
CVE-2025-9074 is a server-side request forgery (SSRF) vulnerability in Docker Desktop for Windows. Successful exploitation of this vulnerability could allow an attacker unauthorised access to user files on the host system.
Affected Products
Docker Desktop for Windows version 4.44.2 and earlier
Mitigation
Users and administrators of affected product versions are strongly advised to update to the latest versions immediately.
References
https://nvd.nist.gov/vuln/detail/CVE-2025-9074