Docker API Unauthenticated RCE (CVE-2025-9074)

A critical CVE-2025-9074 vulnerability in Docker Desktop enables locally running Linux containers to connect to the Docker Engine API through the default subnet (192.168.65.7:2375). The issue persists regardless of Enhanced Container Isolation (ECI) or TCP exposure settings. Proof of Concept exploit code is publicly available for CVE-2025-9074. The vulnerability may allow unauthorized access to user files on the host system. Hence, the risk level is rated as High Risk.

A standalone Bash script to exploit exposed Docker APIs (typically port 2375) without authentication. This tool automates container breakout via volume mounting, allowing for arbitrary command execution on the host system with root/admin privileges.

Features

• Universal OS Support: Automatically detects the target OS (Linux vs. Windows/Docker Desktop) and adjusts the mount point accordingly (/:/host_root or /mnt/host/c:/host_root).
• Air-Gap Friendly: Enumerates and uses existing images on the target system. Does not require internet access on the target to pull new images.
• Auto-Cleanup: Forcefully removes the container after command execution to minimize footprint.
• Zero Dependencies: Written in pure Bash using standard curl, grep, and sed. No jq or external binaries required.

Usage

chmod +x exploit.sh
./exploit.sh <TARGET_IP> <COMMAND> [PORT]

Proof Of Concept