CVE-2025-15558

High

Advisory

Published 5 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.0; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 360; of 17,781 indexed, latest versions
Container images: 356; deployed by those charts
Fix available: 1 of 2; affected packages

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows

Carried by container images the latest versions of 360 of 17,781 indexed charts deploy, on 356 images.

Affected package	Affected versions	Fixed in	Images
github.com/docker/cligolang	v0.0.0-20181219132003-336b2a5cac7f, v0.0.0-20190506213505-d88565df0c2d, v0.0.0-20191017083524-a8ff7f821017, v0.0.0-20200130152716-5d0cf8839492+64 more	29.2.0, 29.2.0+incompatible	356
github.com/docker/compose/v2golang	v2.40.3	no fix listed	1

OSV records: GHSA-p436-gjf2-799p GO-2026-4610
Also known as: BIT-docker-cli-2025-15558

Charts affected

360 by stars

Chart

Latest

Affected images

Radar Score

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	29.2.0+incompatible

Open the chart page →

7,510

verhuis-serviceverhuis-service

1.0.0

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	29.2.0+incompatible

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1.0.0

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	29.2.0+incompatible

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1.1.0

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	29.2.0+incompatible

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1.1.0

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	29.2.0+incompatible

Open the chart page →

7,429

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	github.com/docker/cli@v23.0.0-rc.2+incompatible	29.2.0

Open the chart page →

6,232

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492	29.2.0+incompatible

Open the chart page →

7,552

mesherywenerme

1.0.69

1 of 1 See more

meshery wenerme 1.0.69

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	9b68e81d392e	github.com/docker/cli@v28.5.2+incompatible	29.2.0

Open the chart page →

1,407

traefikwenerme

9.1.1

1 of 1 See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
library/traefik :2.2.8	f5af5a5ce17f	github.com/docker/cli@v0.0.0-20200221155518-740919cc7fc0	29.2.0+incompatible

Open the chart page →

3,369

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-15558.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	github.com/docker/cli@v20.10.21+incompatible	29.2.0

Open the chart page →

13,677

Container images carrying it

356 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	github.com/docker/cli@v20.10.0-beta1.0.20201029214301-1d20b15adc38+incompatible	29.2.0	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	github.com/docker/cli@v20.10.9+incompatible	29.2.0	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	github.com/docker/cli@v20.10.9+incompatible	29.2.0	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	github.com/docker/cli@v24.0.6+incompatible	29.2.0	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	github.com/docker/cli@v20.10.7+incompatible	29.2.0	1
registry.gitlab.com/xrow-public/ci-tools/tools :main	9b9d1ed86b6a	github.com/docker/cli@v28.3.2+incompatible	29.2.0	1