CVE-2025-15558
High · 8.0CVSS
8.0
EPSS
0.5%
Published
Mar 4, 2026
CISA due date
—
The record
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user. This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/manager https://pkg.go.dev/github.com/docker/cli@v29.1.5+incompatible/cli-plugins/manager package, such as Docker Compose. This issue does not impact non-Windows binaries, and projects not using the plugin-manager code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | aactl | 0 | 0.4.12-r45 |
| Chainguard | argo-workflow-controller-3.6 | 0 | 3.6.19-r3 |
| Chainguard | argo-workflow-controller-3.7 | 0 | 3.7.10-r5 |
| Chainguard | argo-workflow-controller-4.0 | 0 | 4.0.1-r4 |
| Chainguard | argo-workflow-controller-fips-3.6 | 0 | 0 |
| Chainguard | argo-workflow-controller-fips-3.7 | 0 | 3.7.10-r4 |
| Chainguard | argo-workflow-controller-fips-4.0 | 0 | 4.0.1-r5 |
| Chainguard | bento | 0 | 1.15.0-r3 |
| Chainguard | bento-fips | 0 | 1.15.1-r1 |
| Chainguard | bom | 0 | 0 |
| Chainguard | buildctl-fips | 0 | 0.28.0-r0 |
| Chainguard | cloudbeat-8.17 | 0 | 8.17.10-r10 |
| Chainguard | cloudbeat-8.19 | 0 | 8.19.12-r4 |
| Chainguard | cloudbeat-9.0 | 0 | 9.0.8-r11 |
| Chainguard | cloudbeat-9.1 | 0 | 9.1.10-r6 |
| Chainguard | cloudbeat-9.2 | 0 | 9.2.6-r3 |
| Chainguard | cloudbeat-fips-8.17 | 0 | 8.17.10-r14 |
| Chainguard | cloudbeat-fips-8.19 | 0 | 8.19.12-r3 |
| Chainguard | cloudbeat-fips-9.0 | 0 | 9.0.8-r11 |
| Chainguard | cloudbeat-fips-9.1 | 0 | 9.1.10-r6 |
| Chainguard | cloudbeat-fips-9.2 | 0 | 9.2.6-r3 |
| Chainguard | cosign | 0 | 3.0.5-r2 |
| Chainguard | cosign-fips | 0 | 3.0.5-r2 |
| Chainguard | crossplane-1.20 | 0 | 1.20.5-r5 |
| Chainguard | crossplane-1.20-crank | 0 | 1.20.5-r5 |
| Chainguard | crossplane-2.0 | 0 | 2.0.7-r5 |
| Chainguard | crossplane-2.0-crank | 0 | 2.0.7-r5 |
| Chainguard | crossplane-2.1 | 0 | 2.1.4-r6 |
| Chainguard | crossplane-2.1-crank | 0 | 2.1.4-r6 |
| Chainguard | crossplane-2.2 | 0 | 2.2.0-r2 |
| Chainguard | crossplane-2.2-crank | 0 | 2.2.0-r2 |
| Chainguard | crossplane-fips-1.20 | 0 | 1.20.5-r6 |
| Chainguard | crossplane-fips-1.20-crank | 0 | 1.20.5-r6 |
| Chainguard | crossplane-fips-2.0 | 0 | 2.0.7-r5 |
| Chainguard | crossplane-fips-2.0-crank | 0 | 2.0.7-r5 |
| Chainguard | crossplane-fips-2.1 | 0 | 2.1.4-r5 |
| Chainguard | crossplane-fips-2.1-crank | 0 | 2.1.4-r5 |
| Chainguard | crossplane-fips-2.2 | 0 | 2.2.0-r4 |
| Chainguard | crossplane-fips-2.2-crank | 0 | 2.2.0-r4 |
| Chainguard | dagdotdev | 0 | 0.0.20-r4 |
| Chainguard | dive | 0 | 0.13.1-r13 |
| Chainguard | docker-credential-gcr | 0 | 0 |
| Chainguard | docker-credential-gcr-fips | 0 | 0 |
| Chainguard | eksctl | 0 | 0.224.0-r1 |
| Chainguard | falcoctl | 0 | 0 |
| Chainguard | falcoctl-fips | 0 | 0.12.2-r4 |
| Chainguard | falcoctl-fips-0.4 | 0 | 0.4.0-r32 |
| Chainguard | flux-2.6 | 0 | 2.6.4-r14 |
| Chainguard | flux-2.7 | 0 | 2.7.5-r9 |
| Chainguard | flux-2.8 | 0 | 2.8.1-r2 |
| Chainguard | flux-fips-2.6 | 0 | 2.6.4-r14 |
| Chainguard | flux-fips-2.7 | 0 | 2.7.5-r8 |
| Chainguard | flux-fips-2.8 | 0 | 2.8.1-r3 |
| Chainguard | flux-helm-controller | 0 | 1.5.1-r2 |
| Chainguard | flux-helm-controller-fips | 0 | 1.5.1-r3 |
| Chainguard | flux-image-automation-controller | 0 | 0 |
| Chainguard | flux-image-automation-controller-fips | 0 | 1.1.0-r2 |
| Chainguard | flux-image-reflector-controller | 0 | 1.1.0-r1 |
| Chainguard | flux-image-reflector-controller-fips | 0 | 0 |
| Chainguard | flux-kustomize-controller | 0 | 1.8.1-r2 |
| Chainguard | flux-kustomize-controller-fips | 0 | 1.8.1-r4 |
| Chainguard | flux-notification-controller | 0 | 1.8.1-r1 |
| Chainguard | flux-notification-controller-fips | 0 | 1.8.1-r2 |
| Chainguard | flux-source-watcher | 0 | 2.1.0-r3 |
| Chainguard | flux-source-watcher-fips | 0 | 2.1.0-r2 |
| Chainguard | gatekeeper-3.20-gator | 0 | 0 |
| Chainguard | gatekeeper-3.21-gator | 0 | 0 |
| Chainguard | gatekeeper-3.22-gator | 0 | 0 |
| Chainguard | gh | 0 | 2.87.3-r1 |
| Chainguard | gitlab-rails-ce-18.10 | 0 | 0 |
| Chainguard | gitlab-rails-ce-18.7 | 0 | 0 |
| Chainguard | gitlab-rails-ce-18.8 | 0 | 0 |
| Chainguard | gitlab-rails-ce-18.9 | 0 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.10 | 0 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.7 | 0 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.8 | 0 | 0 |
| Chainguard | gitlab-rails-ce-fips-18.9 | 0 | 0 |
| Chainguard | gitlab-runner-18.10 | 0 | 0 |
| Chainguard | gitlab-runner-18.7 | 0 | 0 |
| Chainguard | gitlab-runner-18.8 | 0 | 0 |
| Chainguard | gitlab-runner-18.9 | 0 | 0 |
| Chainguard | gitlab-runner-fips-18.10 | 0 | 0 |
| Chainguard | gitlab-runner-fips-18.7 | 0 | 0 |
| Chainguard | gitlab-runner-fips-18.8 | 0 | 0 |
| Chainguard | gitlab-runner-fips-18.9 | 0 | 0 |
| Chainguard | gitlab-runner-helper-18.10 | 0 | 0 |
| Chainguard | gitlab-runner-helper-18.7 | 0 | 0 |
| Chainguard | gitlab-runner-helper-18.8 | 0 | 0 |
| Chainguard | gitlab-runner-helper-18.9 | 0 | 0 |
| Chainguard | gitlab-runner-helper-fips-18.7 | 0 | 0 |
| Chainguard | gitlab-runner-helper-fips-18.8 | 0 | 0 |
| Chainguard | gitlab-runner-helper-fips-18.9 | 0 | 0 |
| Chainguard | gitsign | 0 | 0.14.0-r9 |
| Chainguard | google-osconfig-agent | 0 | 20251028.00-r9 |
| Chainguard | guac | 0 | 1.0.1-r8 |
| Chainguard | guacingest | 0 | 1.0.1-r8 |
| Chainguard | guacone | 0 | 1.0.1-r8 |
| Chainguard | harbor-2.11 | 0 | 2.11.2-r32 |
| Chainguard | harbor-2.11-jobservice | 0 | 2.11.2-r32 |
| Chainguard | harbor-2.12 | 0 | 2.12.4-r27 |
| Chainguard | harbor-2.12-jobservice | 0 | 2.12.4-r27 |
| Chainguard | harbor-2.13 | 0 | 2.13.4-r13 |
| Chainguard | harbor-2.14 | 0 | 2.14.2-r13 |
| Chainguard | harbor-2.14-jobservice | 0 | 2.14.2-r13 |
| Chainguard | harbor-fips-2.11 | 0 | 2.11.2-r38 |
| Chainguard | harbor-fips-2.11-jobservice | 0 | 2.11.2-r38 |
| Chainguard | harbor-fips-2.12 | 0 | 2.12.4-r25 |
| Chainguard | harbor-fips-2.12-jobservice | 0 | 2.12.4-r25 |
| Chainguard | harbor-fips-2.13 | 0 | 2.13.4-r12 |
| Chainguard | harbor-fips-2.13-jobservice | 0 | 2.13.4-r12 |
| Chainguard | harbor-fips-2.14 | 0 | 2.14.2-r14 |
| Chainguard | harbor-fips-2.14-jobservice | 0 | 2.14.2-r14 |
| Chainguard | harbor-scanner-trivy | 0 | 0.34.2-r3 |
| Chainguard | harbor-scanner-trivy-fips | 0 | 0.31.4-r19 |
| Chainguard | image-factory | 0 | 1.0.3-r2 |
| Chainguard | image-factory-fips | 0 | 1.0.3-r3 |
| Chainguard | incert | 0 | 0.5.0-r10 |
| Chainguard | istio-pilot-agent-1.27 | 0 | 1.27.7-r2 |
| Chainguard | istio-pilot-agent-1.28 | 0 | 1.28.4-r3 |
| Chainguard | istio-pilot-agent-1.29 | 0 | 1.29.0-r2 |
| Chainguard | istio-pilot-agent-fips-1.27 | 0 | 1.27.7-r3 |
| Chainguard | istio-pilot-agent-fips-1.28 | 0 | 1.28.4-r3 |
| Chainguard | istio-pilot-agent-fips-1.29 | 0 | 1.29.0-r3 |
| Chainguard | istio-pilot-discovery-1.27 | 0 | 1.27.7-r2 |
| Chainguard | istio-pilot-discovery-1.28 | 0 | 1.28.4-r3 |
| Chainguard | istio-pilot-discovery-1.29 | 0 | 1.29.0-r2 |
| Chainguard | istio-pilot-discovery-fips-1.27 | 0 | 1.27.7-r3 |
| Chainguard | istio-pilot-discovery-fips-1.28 | 0 | 1.28.4-r3 |
| Chainguard | istio-pilot-discovery-fips-1.29 | 0 | 1.29.0-r3 |
| Chainguard | istioctl-1.27 | 0 | 1.27.7-r2 |
| Chainguard | istioctl-1.28 | 0 | 1.28.4-r3 |
| Chainguard | istioctl-1.29 | 0 | 1.29.0-r2 |
| Chainguard | k3d | 0 | 5.8.3-r25 |
| Chainguard | k3s | 0 | 1.35.2.1-r1 |
| Chainguard | k3s-1.31 | 0 | 1.31.6.1-r12 |
| Chainguard | k3s-1.32 | 0 | 1.32.13.1-r1 |
| Chainguard | k3s-1.33 | 0 | 1.33.9.1-r2 |
| Chainguard | k3s-static | 0 | 1.35.2.1-r1 |
| Chainguard | k3s-static-1.31 | 0 | 1.31.6.1-r12 |
| Chainguard | k3s-static-1.32 | 0 | 1.32.13.1-r1 |
| Chainguard | k3s-static-1.33 | 0 | 1.33.9.1-r2 |
| Chainguard | k8sgpt | 0 | 0 |
| Chainguard | k9s | 0 | 0.50.18-r6 |
| Chainguard | k9s-fips | 0 | 0.50.18-r8 |
| Chainguard | kargo | 0 | 1.9.5-r3 |
| Chainguard | katib-controller | 0 | 0.19.0-r6 |
| Chainguard | kbld | 0 | 0.47.2-r1 |
| Chainguard | kbld-fips | 0 | 0.47.2-r2 |
| Chainguard | knative-serving-1.17-controller | 0 | 1.17.2-r14 |
| Chainguard | knative-serving-1.18-controller | 0 | 1.18.2-r9 |
| Chainguard | knative-serving-1.19-controller | 0 | 1.19.9-r5 |
| Chainguard | knative-serving-1.20-controller | 0 | 1.20.3-r3 |
| Chainguard | knative-serving-1.21-controller | 0 | 1.21.1-r2 |
| Chainguard | knative-serving-fips-1.17-controller | 0 | 1.17.2-r11 |
| Chainguard | knative-serving-fips-1.18-controller | 0 | 1.18.2-r8 |
| Chainguard | knative-serving-fips-1.19-controller | 0 | 1.19.9-r6 |
| Chainguard | knative-serving-fips-1.20-controller | 0 | 1.20.3-r3 |
| Chainguard | knative-serving-fips-1.21-controller | 0 | 1.21.1-r3 |
| Chainguard | ko | 0 | 0.18.1-r4 |
| Chainguard | ko-fips | 0 | 0.18.1-r5 |
| Chainguard | kpt | 0 | 0 |
| Chainguard | kubescape | 0 | 0 |
| Chainguard | kubescape-operator | 0 | 0.2.129-r2 |
| Chainguard | kubescape-operator-fips | 0 | 0.2.129-r2 |
| Chainguard | kubescape-server | 0 | 0 |
| Chainguard | kubescape-server-downloader | 0 | 0 |
| Chainguard | kubescape-server-fips | 0 | 0 |
| Chainguard | kubescape-server-fips-downloader | 0 | 0 |
| Chainguard | kubevela-vela-cli | 0 | 0 |
| Chainguard | kubevela-vela-cli-fips | 0 | 0 |
| Chainguard | kubevela-vela-core | 0 | 0 |
| Chainguard | kubevela-vela-core-fips | 0 | 0 |
| Chainguard | kwokctl | 0 | 0.7.0-r10 |
| Chainguard | kyverno-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-1.16 | 0 | 1.16.3-r8 |
| Chainguard | kyverno-1.17 | 0 | 1.17.1-r5 |
| Chainguard | kyverno-background-controller-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-background-controller-1.16 | 0 | 1.16.3-r8 |
| Chainguard | kyverno-background-controller-1.17 | 0 | 1.17.1-r5 |
| Chainguard | kyverno-background-controller-fips-1.14 | 0 | 1.14.5-r11 |
| Chainguard | kyverno-background-controller-fips-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-background-controller-fips-1.16 | 0 | 1.16.3-r7 |
| Chainguard | kyverno-cleanup-controller-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-cleanup-controller-1.16 | 0 | 1.16.3-r8 |
| Chainguard | kyverno-cleanup-controller-1.17 | 0 | 1.17.1-r5 |
| Chainguard | kyverno-cleanup-controller-fips-1.14 | 0 | 1.14.5-r11 |
| Chainguard | kyverno-cleanup-controller-fips-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-cleanup-controller-fips-1.16 | 0 | 1.16.3-r7 |
| Chainguard | kyverno-cleanup-controller-fips-1.17 | 0 | 1.17.1-r4 |
| Chainguard | kyverno-cli-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-cli-1.16 | 0 | 1.16.3-r8 |
| Chainguard | kyverno-cli-1.17 | 0 | 1.17.1-r5 |
| Chainguard | kyverno-cli-fips-1.14 | 0 | 1.14.5-r11 |
| Chainguard | kyverno-cli-fips-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-cli-fips-1.16 | 0 | 1.16.3-r7 |
| Chainguard | kyverno-cli-fips-1.17 | 0 | 1.17.1-r4 |
| Chainguard | kyverno-fips-1.14 | 0 | 1.14.5-r11 |
| Chainguard | kyverno-fips-1.15 | 0 | 1.15.3-r6 |
| Chainguard | kyverno-fips-1.17 | 0 | 1.17.1-r4 |
| Chainguard | kyverno-init-container-1.15 | 0 | 1.15.3-r6 |
Related vulnerabilities
- CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC. Also affects aactl
- CVE-2026-1229 The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an… Also affects aactl
- CVE-2026-26958 filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with… Also affects aactl
- CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or… Also affects aactl
- CVE-2025-61732 A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling… Also affects aactl
- CVE-2025-68119 Downloading and building modules with malicious version strings can cause local code… Also affects aactl
- CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to an… Also affects aactl
- CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query. Also affects aactl