CVE-2026-112917

— UNSCOREDpublic exploit available

Published 2026-11-03 · Updated 2026-11-04

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-based backends are unaffected. The issue is fully fixed only with Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 or later running on an older WSL remains affected.

Weaknesses

CWE-424

Public exploit & PoC references

https://github.com/microsoft/WSL/releases/tag/3.0.3
https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1

All references

https://docs.docker.com/desktop/release-notes/#4980
https://github.com/microsoft/WSL/releases/tag/3.0.3
https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-107352
HIGHCVE-2026-110865PoC
MEDIUMCVE-2026-114659PoC
LOWCVE-2026-121440PoC
MEDIUMCVE-2026-69979
UNSCOREDCVE-2026-76529
MEDIUMCVE-2026-89039
MEDIUMCVE-2026-89419

Related by shared AI tags and CWE weakness class. Browse the full archive.