CVE-2026-106581: Docker Desktop Windows Privilege Escalation

CVE-2026-106581 Overview

CVE-2026-106581 affects Docker Desktop for Windows versions prior to 4.92.0. The installer binary Docker Desktop Installer.exe fails to verify the cryptographic signature of packages supplied through the install -package command. An attacker who provides a crafted package and convinces a user to approve the Docker-signed User Account Control (UAC) prompt can execute attacker-controlled installer actions as LocalSystem. The weakness maps to [CWE-347: Improper Verification of Cryptographic Signature]. Successful exploitation yields full system-level privileges on the target Windows host.

Critical Impact
Attackers can execute arbitrary installer actions as LocalSystem by tricking users into approving a legitimately signed Docker UAC prompt that loads a malicious unsigned package.

Affected Products

Docker Desktop for Windows versions before 4.92.0
Docker Desktop Installer.exe with the install -package command path
Windows endpoints where users have local administrator approval capability

Discovery Timeline

2026-10-09 - CVE CVE-2026-106581 published to NVD
2026-10-09 - Last updated in NVD database

Technical Details for CVE-2026-106581

Vulnerability Analysis

The vulnerability resides in the package installation flow of Docker Desktop Installer.exe. When invoked with the install -package argument, the installer accepts a package file path and executes installer actions defined inside that package. The installer does not validate that the supplied package carries a valid Docker signature before executing its contents. Because the installer binary itself is signed by Docker, it triggers a Docker-branded UAC elevation prompt that users are conditioned to approve.

Once elevated, the installer runs with LocalSystem privileges. Any actions declared in the attacker-supplied package execute in that context. This grants the attacker full control over the operating system, including file system writes, service creation, and credential access.

Root Cause

The root cause is missing signature verification on externally supplied input [CWE-347]. The install -package code path trusts the caller-provided package without checking its origin or integrity. Trust is anchored only to the signed installer binary, not to the package it loads at runtime.

Attack Vector

Exploitation requires local access and user interaction. An attacker stages a crafted package on the target system, then invokes Docker Desktop Installer.exe install -package <attacker.pkg>. Windows displays a UAC prompt signed by Docker Inc. If the user approves, the installer processes the malicious package and executes attacker-defined actions as LocalSystem. Delivery can occur through phishing, social engineering, or chained execution from an initial foothold with limited privileges.

Detection Methods for CVE-2026-106581

Indicators of Compromise

Execution of Docker Desktop Installer.exe with the install -package command-line argument referencing non-standard paths such as %TEMP%, %APPDATA%, or user-writable directories
UAC elevation events (Event ID 4688 with elevated token) spawning from Docker Desktop Installer.exe outside of normal Docker upgrade windows
Unexpected child processes of Docker Desktop Installer.exe running as NT AUTHORITY\SYSTEM
Package files with .pkg or installer archive extensions dropped in temporary or user-controlled locations prior to Docker installer invocation

Detection Strategies

Alert on command-line executions matching Docker Desktop Installer.exe combined with the install -package flag
Correlate installer invocations with the source package path and flag any path outside the official Docker distribution directory
Baseline legitimate Docker Desktop upgrade activity and alert on deviations in frequency, user context, or package location

Monitoring Recommendations

Collect Windows Security event logs (4688, 4697) and Sysmon Event ID 1 for process creation on hosts running Docker Desktop
Forward Docker Desktop installer telemetry to a centralized logging platform for retrospective analysis
Monitor creation of new Windows services or scheduled tasks originating from the Docker installer process tree

How to Mitigate CVE-2026-106581

Immediate Actions Required

Upgrade Docker Desktop for Windows to version 4.92.0 or later on all endpoints
Audit endpoints for prior invocations of Docker Desktop Installer.exe install -package with non-standard package paths
Restrict local administrator rights so that standard users cannot approve UAC prompts without IT review
Educate users to reject UAC prompts triggered by applications they did not intentionally launch, even when signed by a trusted vendor

Patch Information

Docker addressed the signature verification gap in Docker Desktop 4.92.0. Review the Docker Desktop Release Notes 4.9.20 for the full change summary. Deploy the updated installer through managed software distribution to ensure consistent remediation across the fleet.

Workarounds

Block execution of Docker Desktop Installer.exe with the install -package argument through application control policies such as Windows Defender Application Control (WDAC) or AppLocker
Remove local administrator privileges from standard user accounts to prevent UAC approval of elevation prompts
Restrict write access to directories commonly used to stage installer packages until the patch is deployed

bash

# Example AppLocker command-line condition to block the vulnerable invocation
# Deny rule: Docker Desktop Installer.exe when command line contains "install -package"
# Apply through Group Policy: Computer Configuration > Policies > Windows Settings > Security Settings > Application Control Policies