{"api_version":"1","generated_at":"2026-11-06T17:40:02+00:00","cve":"CVE-2026-112917","urls":{"html":"https://cve.report/CVE-2026-112917","api":"https://cve.report/api/cve/CVE-2026-112917.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-112917","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-112917"},"summary":{"title":"Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall","description":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-based backends are unaffected. The issue is fully fixed only with Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 or later running on an older WSL remains affected.","state":"PUBLISHED","assigner":"Docker","published_at":"2026-11-03 19:17:53","updated_at":"2026-11-04 14:17:27"},"problem_types":["CWE-424","CWE-424 CWE-424: Improper Protection of Alternate Path"],"metrics":[{"version":"4.0","source":"security@docker.com","type":"Secondary","score":"9.2","severity":"CRITICAL","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.2,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"9.2","severity":"CRITICAL","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","data":{"baseScore":9.2,"baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","version":"4.0"}}],"references":[{"url":"https://docs.docker.com/desktop/release-notes/#4980","name":"https://docs.docker.com/desktop/release-notes/#4980","refsource":"security@docker.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/microsoft/WSL/releases/tag/3.0.3","name":"https://github.com/microsoft/WSL/releases/tag/3.0.3","refsource":"security@docker.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1","name":"https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1","refsource":"security@docker.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-112917","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112917","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Docker","product":"Docker Desktop","version":"unaffected 4.98.0 * semver","platforms":["Windows"]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Upgrade to Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Both are required.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Oryam Halachmi of Deune","lang":"en"},{"source":"CNA","value":"Tevel Halachmi of Deune","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"112917","cve":"CVE-2026-112917","epss":"0.001840000","percentile":"0.081060000","score_date":"2026-11-04","updated_at":"2026-11-05 00:04:17"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-112917","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-04T04:56:32.458790Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-04T13:33:36.124Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"affected","modules":["WSL2 backend"],"platforms":["Windows"],"product":"Docker Desktop","vendor":"Docker","versions":[{"lessThan":"*","status":"unaffected","version":"4.98.0","versionType":"semver"}]}],"configurations":[{"lang":"en","value":"Affects the WSL2 backend on x86-64 hosts (32-bit syscall compatibility is enabled in stock WSL kernels). Host-file access requires a reachable host-side AF_VSOCK service. The fix requires WSL 3.0.3 (kernel 6.18.54.1) or later."}],"credits":[{"lang":"en","type":"finder","value":"Oryam Halachmi of Deune"},{"lang":"en","type":"finder","value":"Tevel Halachmi of Deune"}],"descriptions":[{"lang":"en","value":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-based backends are unaffected. The issue is fully fixed only with Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 or later running on an older WSL remains affected."}],"metrics":[{"cvssV4_0":{"baseScore":9.2,"baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","version":"4.0"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-424","description":"CWE-424: Improper Protection of Alternate Path","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-03T19:08:11.422Z","orgId":"686469e6-3ff6-451b-ab8b-cf5b9e89401e","shortName":"Docker"},"references":[{"name":"Docker Desktop release notes","tags":["release-notes"],"url":"https://docs.docker.com/desktop/release-notes/#4980"},{"name":"Microsoft WSL 3.0.3 release notes","tags":["release-notes"],"url":"https://github.com/microsoft/WSL/releases/tag/3.0.3"},{"name":"Microsoft WSL kernel 6.18.54.1 dependency release notes","tags":["release-notes"],"url":"https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1"}],"solutions":[{"lang":"en","value":"Upgrade to Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Both are required."}],"source":{"discovery":"EXTERNAL"},"title":"Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall"}},"cveMetadata":{"assignerOrgId":"686469e6-3ff6-451b-ab8b-cf5b9e89401e","assignerShortName":"Docker","cveId":"CVE-2026-112917","datePublished":"2026-11-03T19:08:11.422Z","dateReserved":"2026-10-19T20:23:38.311Z","dateUpdated":"2026-11-04T13:33:36.124Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-03 19:17:53","lastModifiedDate":"2026-11-04 14:17:27","problem_types":["CWE-424","CWE-424 CWE-424: Improper Protection of Alternate Path"],"metrics":{"cvssMetricV40":[{"source":"security@docker.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.2,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-04T04:56:32.458790Z","id":"CVE-2026-112917","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"112917","Ordinal":"1","Title":"Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketc","CVE":"CVE-2026-112917","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"112917","Ordinal":"1","NoteData":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-based backends are unaffected. The issue is fully fixed only with Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 or later running on an older WSL remains affected.","Type":"Description","Title":"Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketc"}]}}}