점검 대응높음KEV 미등록
CVE-2025-15558
Docker Docker CLI, Compose, Assisted Installer for Red Hat OpenShift Container Platform 2 취약점
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user. This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/man...
- 대응 우선순위
- 점검
- CVSS
- 7
- EPSS
- 0.47% 백분위 38.4% · 2026.08.03 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.03.05