Docker security advisories, October 2026

Docker advisories published in October 2026

1. Oct 27, 2026
   Medium [CVE-2026-114409] Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction

   Medium5.7

2. Oct 26, 2026
   Advisory [CVE-2026-99999] Docker Desktop 4.97.0 security update: CVE-2026-99999

   Unrated

3. Oct 13, 2026
   Critical [CVE-2026-105445] Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret

   Critical9.4

4. Oct 9, 2026
   High [CVE-2026-106581] Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package

   High7.3

5. Oct 8, 2026
   Medium [CVE-2026-105452] Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy

   Medium5.9

6. Oct 8, 2026
   Medium [CVE-2026-101998] Docker Sandboxes could fail open while masking credentials in protected proxy responses

   Medium5.9

7. Oct 8, 2026
   Medium [CVE-2026-105570] Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively

   Medium6.7

8. Oct 7, 2026
   High [CVE-2026-92543] Docker Engine classifies a registry hostname as insecure using an any-match DNS check

   High7.6

9. Oct 7, 2026
   Medium [CVE-2026-92542] Docker: The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes

   Medium6.9

10. Oct 5, 2026
    High [CVE-2026-93318] BuildKit: malicious image can advertise DiffIDs from another image while containing different layer contents

    High7.5

11. Oct 5, 2026
    High [CVE-2026-93316] If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices

    High7.1

12. Oct 5, 2026
    Medium [CVE-2026-93321] Docker: malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon

    Medium6.9

13. Oct 5, 2026
    Medium [CVE-2026-93315] Docker: When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup

    Medium5.8

14. Oct 5, 2026
    Medium [CVE-2026-103433] Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs

    Medium6.9

15. Oct 5, 2026
    Medium [CVE-2026-93326] Docker: build step for a Git source, crafted in a specific way, can bypass some policy validation rules

    Medium6.0

16. Oct 5, 2026
    Medium [CVE-2026-93323] The Dockerfile frontend loaded the Dockerfile and.dockerignore files of a build context into memory without a size limit

    Medium6.8

17. Oct 5, 2026
    Medium [CVE-2026-93320] BuildKit may be tricked into performing file actions with special file inodes where regular files are expected

    Medium6.0

18. Oct 5, 2026
    Medium [CVE-2026-93319] malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic

    Medium5.7

19. Oct 5, 2026
    Medium [CVE-2026-93317] Docker: unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest

    Medium5.9