AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-12744

HIGH · CVSS 8.8 EPSS 0.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-03 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It affects Docker.

CVE
CVE-2025-12744
Severity
HIGH
CVSS
8.8
EPSS
0.63%
Docker

Original NVD Description

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.