oilseller2001/poc-for-cve-2025-9074Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.
This repository provides a Proof-of-Concept (PoC) exploit for CVE-2025-9074, which involves unauthenticated exposure of the Docker Engine API on TCP port 2375.
An attacker who can access this exposed API can:
This PoC is released for educational and authorized security testing purposes only.
Unauthorized exploitation of systems is illegal and unethical.
Use this PoC only on environments you own or have explicit permission to test.
2375requests libraryInstall dependencies:
pip install requests
If you're testing this PoC on your local machine, make sure the Docker API is exposed over TCP without TLS. On Docker Desktop, follow these steps:
⚠️ Warning: This option disables authentication on the Docker API.
Any local or remote attacker who can reach localhost:2375 can control your Docker daemon.
Only enable this in isolated testing environments — never in production.
Once enabled, you can verify with:
curl http://127.0.0.1:2375/info
If the API responds with JSON containing "ServerVersion", then the daemon is exposed correctly.
# Clone this repository
git clone https://github.com/<your-username>/CVE-2025-9074-POC.git
cd CVE-2025-9074-POC
# Run the PoC
python3 poc_cve_2025_9074.py <target_ip>:2375
If no target is provided, the script will prompt for input and default to 127.0.0.1:2375.
Check API availability
Confirms if the Docker API responds to /info.
Pull alpine image
Ensures the required base image is available.
Prepare malicious container payload
Creates a container with host filesystem bind-mounted at /mnt.
Create the container Sends a container creation request.
Start the container Container is started, providing access to the host filesystem.
Post-exploitation Example:
docker exec -it <container_id> sh
ls /mnt
Expose daemon on tcp://localhost:2375 without TLS in Docker Desktop after testing.PoC script co-developed with Gemini AI during research.
This PoC is released under the MIT License.