CVE-2024-6222: Docker Desktop

High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days.

In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/#4290 fixes the issue on MacOS, Linux and Windows with Hyper-V backend. As exploitation requires "Allow only extensions distributed through the Docker Marketplace" to be disabled, Docker Desktop  v4.31.0 https://docs.docker.com/desktop/release-notes/#4310  additionally changes the default configuration to enable this setting by default.

Affected products

• Docker Desktop: before 4.29.0 (fixed in 4.29.0)

Published 2024-07-09. Last modified 2026-06-17.