{"id":"CVE-2026-112917","kind":"vulnerability","aliases":["CVE-2026-112917"],"related":[],"title":"Docker Desktop on Windows: container escapes seccomp to reach host files","description":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-based backends are unaffected. The issue is fully fixed only with Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 or later running on an older WSL remains affected.","summary":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use the 32-bit socketcall syscall to bypass the default seccomp block on AF_VSOCK sockets. An attacker in a container can reach host-facing services and Windows files readable by the logged-in user.","severity":"critical","cvss":9.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Docker Desktop (WSL 2 backend, Windows, x86-64)","fixed":["4.98.0 with WSL 3.0.3"],"affected":"< 4.98.0, or any version running WSL < 3.0.3","ecosystem":"vendor"}],"ecosystems":[],"tags":["containers","docker-desktop","runtime","windows","wsl2"],"not_affected_if":["linuxkit-backend","no-docker-desktop","non-x86-64"],"how_to_check":"- Docker Desktop version: About panel or 'docker version'; need 4.98.0 or later.\n- WSL version: 'wsl --version'; need 3.0.3 or later (kernel 6.18.54.1). Both must be met.\n- Applies only to the WSL 2 backend on x86-64; LinuxKit-based backends are stated unaffected (NVD).\n- Exposure needs code running inside a Linux container (CVSS AV:L, PR:L), e.g. untrusted images or CI jobs.","fix":"Update Docker Desktop to 4.98.0 or later AND WSL to 3.0.3 or later (wsl --update). Docker's 4.98.0 release notes: the AF_VSOCK bypass fix 'requires WSL 3.0.3 or later'; 4.98.0 on an older WSL stays affected per the NVD description.","status":"open","published_at":"2026-11-03T19:17:53+00:00","first_seen_at":"2026-11-03T19:44:51+00:00","triaged_at":"2026-11-03T19:45:26+00:00","updated_at":"2026-11-03T19:46:41+00:00","category":"runtime","confidence":0.8,"triage":{"at":"2026-11-03T19:45:26Z","model":"claude-haiku-5-5","output":{"fix":"- Docker Desktop for Windows: `4.98.0` or later.\n- WSL: `3.0.3` or later.","reach":"local","title":"Docker Desktop on Windows: container escapes seccomp to reach host files","impact":"high","summary":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use the 32-bit socketcall syscall to bypass the default seccomp block on AF_VSOCK sockets. An attacker in a container can reach host-facing services and Windows files readable by the logged-in user.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["docker-desktop","windows","wsl2","containers"],"confidence":0.7,"fix_status":"available","needs_auth":"unknown","worst_case":"Container code reaches host services and Windows files of the logged-in user","analyst_note":"Sources do not state whether an attacker needs a container running already, or the exact prerequisites; check the NVD entry and linked release notes.","how_to_check":"- Check the Docker Desktop version in the Docker Desktop About panel or with `docker version`; the fix needs Docker Desktop `4.98.0` or later.\n- Check the WSL version with `wsl --version`; the fix needs WSL `3.0.3` or later.\n- Confirm the backend is WSL2 on x86-64; LinuxKit-based backends are stated to be unaffected.","plain_action":"","needs_analyst":true,"not_affected_if":["linuxkit-backend","non-x86-64","no-docker-desktop"],"who_is_affected":"Teams running Docker Desktop for Windows with the WSL2 backend on x86-64 machines, where developers or CI runners execute Linux containers. Machines using LinuxKit-based backends are stated to be unaffected. Docker Desktop 4.98.0 or later on an older WSL still remains affected, so both versions must be updated.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"critical"},"cost_usd":0.000774,"input_tokens":4249,"output_tokens":699,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Sources do not state whether an attacker needs a container running already, or the exact prerequisites; check the NVD entry and linked release notes.","search":"'-112917':14A,17A '-2026':13A,16A '-64':25A,132C '2':21A '3.0.3':154C '32':49B,99C '4.98.0':149C,159C 'access':121C 'af':60B,109C 'affect':130C,168C 'attack':64B 'backend':22A,41B,92C,137C 'base':136C 'bit':50B,100C 'block':58B 'bypass':54B,103C 'contain':5A,26B,45B,67B,96C 'cve':12A,15A 'default':56B,105C 'desktop':2A,19A,29B,35B,86C,148C,158C 'docker':1A,18A,28B,34B,85C,147C,157C 'docker-desktop':27B 'escap':6A 'expos':113C 'face':72B,116C 'file':11A,76B,120C 'fix':144C 'fulli':143C 'host':10A,71B,115C 'host-fac':70B,114C 'issu':129C,141C 'later':151C,156C,161C 'linux':44B,95C 'linuxkit':135C 'linuxkit-bas':134C 'log':81B,125C 'logged-in':80B,124C 'older':165C 'reach':9A,69B 'readabl':77B 'remain':167C 'restrict':107C 'run':162C 'runtim':30B 'seccomp':7A,57B,106C 'servic':73B,117C 'socket':62B 'socketcal':51B,101C 'syscal':52B 'unaffect':139C 'unprivileg':43B,94C 'use':47B,98C 'user':83B,127C 'vsock':61B,110C 'window':4A,31B,37B,75B,88C,119C 'windows':23A 'wsl':20A,153C,166C 'wsl2':32B,40B,91C,133C 'x86':24A,131C","nicknames":[],"mitigations":[],"who_affected":"Teams running Docker Desktop for Windows with the WSL2 backend on x86-64 machines, where developers or CI runners execute Linux containers. Machines using LinuxKit-based backends are stated to be unaffected. Docker Desktop 4.98.0 or later on an older WSL still remains affected, so both versions must be updated.","tier":"B","verified":{"fix":{"at":"2026-11-03T19:46:41Z","by":"analyst","doc":"https://github.com/microsoft/WSL/releases/tag/3.0.3","run_id":1522}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["desktopwsl2backendwindowsx8664","dockerdesktopwsl2backendwindowsx8664"],"ptokens":["64","backend","desktop","docker","windows","wsl","x86"],"labels":["containers","critical","dockerdesktop","runtime","windows","wsl2"],"campaign_type":null,"first_public_at":"2026-11-03T19:17:53+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security@docker.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112917","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112917","severity":null,"published_at":"2026-11-03T19:17:53+00:00","modified_at":"2026-11-03T19:17:53+00:00","first_seen_at":"2026-11-03T19:44:51+00:00","fetched_at":"2026-11-03T19:44:51+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-112917:1522","url":null,"severity":null,"published_at":"2026-11-03T19:46:41+00:00","modified_at":"2026-11-03T19:46:41+00:00","first_seen_at":"2026-11-03T19:46:41+00:00","fetched_at":"2026-11-03T19:46:41+00:00","note":"Docker 4.98.0 release notes (primary) list CVE-2026-112917 fixed, needing WSL 3.0.3+. WSL 3.0.3 and kernel release notes do not name the CVE; they only ship kernel 6.18.54.1, so the link is Docker's statement. No PoC or exploitation found. Attacker prerequisite: ability to run a container (CVSS local, low privileges). No Docker security-announcements entry yet. Did not search X."}],"documents":[{"id":60183,"url":"https://github.com/microsoft/WSL/releases/tag/3.0.3","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":60184,"url":"https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":60317,"url":"https://docs.docker.com/desktop/release-notes/","title":"Docker Desktop release notes 4.98.0","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}