Threat Intel

v0.1

← CVEs

CVE-2025-15558

HIGH 8.0
Published
2026-03-04
Last Modified
2026-03-09
Affected Apps
54
Affected Devices
85
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user. This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/manager https://pkg.go.dev/github.com/docker/cli@v29.1.5+incompatible/cli-plugins/manager  package, such as Docker Compose. This issue does not impact non-Windows binaries, and projects not using the plugin-manager code.
Affected Applications in Environment 54
Desktop v4.67.0 (4.67.0.5)
2 devices
Desktop v4.44.3
2 devices
Desktop v4.40.0
1 device
Desktop v4.41.2 (4.41.2.20)
2 devices
Desktop v4.62.0 (4.62.0.11)
2 devices
Desktop v3.5.2
1 device
Desktop v4.63.0 (4.63.0.11)
3 devices
Desktop v4.38.0
1 device
Desktop v4.66.0 (4.66.0.6)
4 devices
Desktop v4.62.0.11
1 device
Desktop v4.37.1
2 devices
Desktop v4.5.1
1 device
Desktop v4.44.2.33
1 device
Desktop v3.1.0
1 device
Desktop v4.39.0
1 device
Desktop v4.17.1
2 devices
Desktop v4.59.0
2 devices
Desktop v4.5.1.5
1 device
Desktop v4.26.1
1 device
Desktop v4.25.1
1 device
Desktop v4.33.1
1 device
Desktop v4.64.0 (4.64.0.4)
3 devices
Desktop v4.60.1.12
1 device
Desktop v4.29.0
1 device
Desktop v4.5.1.74721
1 device
Desktop v4.67.0.5
1 device
Desktop v4.53.0 (4.52.0.4)
1 device
Desktop v4.65.0 (4.65.0.4)
4 devices
Desktop v4.44.2
1 device
Desktop v4.50.0 (4.50.0.5)
1 device
Desktop v4.58.0.9
1 device
Desktop v4.40.0.17
1 device
Desktop v4.66.1 (4.66.1.8)
3 devices
Desktop v4.27.2
1 device
Desktop v4.55.0.16
2 devices
Desktop v4.55.0
1 device
Desktop v4.61.0 (4.61.0.14)
1 device
Desktop v4.43.2
1 device
Desktop v4.48.0
1 device
Desktop v2.0.0.3
1 device
Desktop v4.63.0
1 device
Desktop v4.44.3.41
1 device
Desktop v4.18.0
1 device
Desktop v4.62.0
1 device
Desktop v4.63.0.11
1 device
Desktop v4.59.0.11
1 device
Desktop v4.43.1
1 device
Desktop v4.67.0
1 device
Desktop v4.3.0
1 device
Desktop v4.41.2
1 device
Desktop v4.60.1
1 device
Desktop v4.41.2.20
1 device
Desktop v4.49.0 (4.49.0.17)
1 device
LINE v3.6.1
37 devices
Affected Devices 85
APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows APEC-LAB17 Windows ARSUTLGU4FRRGEO Windows ASPIRE-170816 Windows DESKTOP-A27UL0P Windows DESKTOP-H4GPOR0 Windows DESKTOP-QO5C653 Windows DPCONT-6QQ5853 Windows DPCONT-F4F0CY3 Windows DPCPD-8N0184227 Windows DPEBIE-5171H8C Windows DPEDUC-2UA71626 Windows DPEMAE-8232PP9 Windows DPENGR-HDJG664 Windows DPHSOB-1NXC094 Windows DPHSOB-31J1H13 Windows DPHSOB-3220NVS Windows DPINFT-5502005K Windows DPTLTC-G414186D Windows DPUWRL-PF55KEY4 Windows DPUWRL-PF5C7SY3 Windows DPUWRL-PF5TGLWN Windows DPVPRS-73BXY44 Windows Dallins-MacBook-Pro-2.local Mac F-16 Mac HTTS171501 Windows JORDAN-YOGA-9I Windows LAPTOP-6UP13PGQ Windows LAPTOP-NLGVL17C Windows MURF-CLUNKER Windows RobertsMacbookPro.local Mac SSWA-ATEM-D9010 Windows TEAL-5CG3473FT0 Windows TROOPER2 Windows USULOAN340 Windows USULOAN429 Windows WIBCTE2108-02 Windows Zhiyuns-MacBook-Pro.local Mac a00288946-F6VM65M2H3 Mac a00295943-YF4WY76Q4D Mac a00957369-K6KVHY00C5 Mac a01513577-M7GJNF6XQR Mac a01841079-LK4T0Y7FP4 Mac a01875599-TY6TF9Y69L Mac a02273884-FYQGVQ1TFP Mac a02490072-PCVFY9PJV6 Mac adamthomas-H73N967GM2 Mac admin.integrations's iMac -H12CRHNTJV40 Mac ah-mbp.lan Mac ken-mpb16-LG9VYFY7QD Mac
References 3