← Database

CVE-2022-31647

HIGH CVSS: 7.1 Published: 2023-04-27 Modified: 2026-06-17

Description

Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659.

Affected Platforms

Docker Desktop

Weakness Type

CWE-59, CWE-59

References