ID:12907 - Exploit for Path traversal in Docker Desktop - CVE-2026-17106

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to write files outside the intended destination.

The vulnerability exists due to path traversal in docker container cp when copying files to a destination path. A local user can supply a crafted destination path to write files outside the intended destination.

Remediation