{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2025-9074/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:docker:desktop:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2025-9074"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Docker Desktop"],"_cs_severities":["high"],"_cs_tags":["container-escape","docker","windows","cve-2025-9074"],"_cs_type":"advisory","_cs_vendors":["Docker"],"content_html":"\u003cp\u003eCVE-2025-9074 is a vulnerability in Docker Desktop for Windows where the Docker Engine HTTP API is reachable from within containers at 192.168.65.7:2375 without authentication. An attacker with container-level access can interact with this API to create new containers with bind mounts to the host Windows file system, enabling full read/write access to the host machine.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker gains initial access to a container running on the target Docker Desktop instance.\u003c/li\u003e\n\u003cli\u003eAttacker performs discovery to identify the reachable Docker Engine API endpoint (192.168.65.7:2375).\u003c/li\u003e\n\u003cli\u003eAttacker validates reachability by sending a GET request to the /_ping endpoint.\u003c/li\u003e\n\u003cli\u003eAttacker constructs a malicious API request to the /containers/create endpoint.\u003c/li\u003e\n\u003cli\u003eAttacker specifies a HostConfig bind mount in the request body, mapping the host's Windows C drive to a directory inside the new container.\u003c/li\u003e\n\u003cli\u003eAttacker spawns the container and executes commands to write or modify files on the underlying Windows host.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for container escape, arbitrary file write, and host-level interaction, potentially leading to full system compromise of the Windows host.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Docker Desktop for Windows to the latest patched version.\u003c/li\u003e\n\u003cli\u003eAudit and restrict access to the Docker Engine API; ensure it is not exposed over HTTP to containers or untrusted networks.\u003c/li\u003e\n\u003cli\u003eImplement network policies to block container-to-container or container-to-host traffic to the Docker API port (2375).\u003c/li\u003e\n\u003cli\u003eImplement monitoring for unauthorized container creation events originating from within existing containers.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-23T19:48:41Z","date_published":"2026-10-23T19:48:41Z","id":"https://feed.craftedsignal.io/briefs/2026-10-docker-desktop-cve-2025-9074/","summary":"A public proof-of-concept for CVE-2025-9074 demonstrates that the Docker Engine API exposure on Docker Desktop for Windows allows container escape and unauthorized host file system access.","title":"Docker Desktop: Container-to-host write via exposed Engine API (CVE-2025-9074)","url":"https://feed.craftedsignal.io/briefs/2026-10-docker-desktop-cve-2025-9074/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2025-9074","version":"https://jsonfeed.org/version/1.1"}