CVE-2025-15558

Description

Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user. This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/manager https://pkg.go.dev/github.com/docker/cli@v29.1.5+incompatible/cli-plugins/manager  package, such as Docker Compose. This issue does not impact non-Windows binaries, and projects not using the plugin-manager code.

CVSS Metrics

• v4.0•HIGH•Score: 7CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U
• v4.0•HIGH•Score: 7CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:X
• v4.0•HIGH•Score: 7CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
• v3.1•HIGH•Score: 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
• v3.1•HIGH•Score: 8CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.47%• Percentile: 40%

Techniques & Countermeasures

• CWE-427•Uncontrolled Search Path Element

  The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Affected Systems

• chainguard•aactl

  < 0.4.12-r45

• chainguard•argo-workflow-controller-3.6

  < 3.6.19-r3

• chainguard•argo-workflow-controller-3.7

  < 3.7.10-r5

• chainguard•argo-workflow-controller-4.0

  < 4.0.1-r4

• chainguard•argo-workflow-controller-fips-3.6

  < 0

• chainguard•argo-workflow-controller-fips-3.7

  < 3.7.10-r4

• chainguard•argo-workflow-controller-fips-4.0

  < 4.0.1-r5

• chainguard•bento

  < 1.15.0-r3

• chainguard•bento-fips

  < 0 | < 1.15.1-r1

• chainguard•bom

  < 0

• chainguard•buildctl-fips

  < 0.28.0-r0

• chainguard•cloudbeat-8.17

  < 8.17.10-r10

• chainguard•cloudbeat-8.18

  all

• chainguard•cloudbeat-8.19

  < 8.19.12-r4

• chainguard•cloudbeat-9.0

  < 9.0.8-r11

• chainguard•cloudbeat-9.1

  < 9.1.10-r6

• chainguard•cloudbeat-9.2

  < 9.2.6-r3

• chainguard•cloudbeat-fips-8.17

  < 8.17.10-r14

• chainguard•cloudbeat-fips-8.18

  all

• chainguard•cloudbeat-fips-8.19

  < 8.19.12-r3

• chainguard•cloudbeat-fips-9.0

  < 9.0.8-r11

• chainguard•cloudbeat-fips-9.1

  < 9.1.10-r6

• chainguard•cloudbeat-fips-9.2

  < 9.2.6-r3

• chainguard•commercial-gitlab-rails-ee-19.1

  all

• chainguard•commercial-gitlab-rails-ee-19.2

  all

• chainguard•commercial-gitlab-rails-ee-19.3

  all

• chainguard•commercial-gitlab-rails-ee-fips-19.1

  all

• chainguard•commercial-gitlab-rails-ee-fips-19.2

  all

• chainguard•commercial-gitlab-rails-ee-fips-19.3

  all

• chainguard•commercial-kyverno-1.15

  all

• chainguard•commercial-kyverno-background-controller-1.15

  all

• chainguard•commercial-kyverno-cleanup-controller-1.15

  all

• chainguard•commercial-kyverno-reports-controller-1.15

  all

• chainguard•commercial-kyvernopre-1.15

  all

• chainguard•consul-k8s-fips-1.4-cli

  < 0

• chainguard•cosign

  < 3.0.5-r2

• chainguard•cosign-fips

  < 3.0.5-r2

• chainguard•crossplane-1.20

  < 1.20.5-r5

• chainguard•crossplane-1.20-crank

  < 1.20.5-r5

• chainguard•crossplane-2.0

  < 2.0.7-r5

• chainguard•crossplane-2.0-crank

  < 2.0.7-r5

• chainguard•crossplane-2.1

  < 2.1.4-r6

• chainguard•crossplane-2.1-crank

  < 2.1.4-r6

• chainguard•crossplane-2.2

  < 2.2.0-r2

• chainguard•crossplane-2.2-crank

  < 2.2.0-r2

• chainguard•crossplane-fips-1.20

  < 1.20.5-r6

• chainguard•crossplane-fips-1.20-crank

  < 1.20.5-r6

• chainguard•crossplane-fips-2.0

  < 2.0.7-r5

• chainguard•crossplane-fips-2.0-crank

  < 2.0.7-r5

• chainguard•crossplane-fips-2.1

  < 2.1.4-r5

Showing first 50 affected entries in server-rendered view.

References (14)

• https://docs.docker.com/desktop/release-notes/
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-28304/
• https://github.com/docker/cli/pull/6713
• https://github.com/docker/cli/security/advisories/GHSA-p436-gjf2-799p
• https://nvd.nist.gov/vuln/detail/CVE-2025-15558
• https://github.com/docker/compose/pull/12300
• https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa
• https://docs.docker.com/desktop/release-notes
• https://github.com/docker/cli
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-28304
• https://access.redhat.com/security/cve/CVE-2025-15558
• https://bugzilla.redhat.com/show_bug.cgi?id=2444574
• https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15558.json
• https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15558.json