CVE-2014-3499: Privilege Escalation in Docker
Summary
CVE-2014-3499: Privilege Escalation in Docker in github.com/docker/docker. Affects github.com/docker/docker versions < 1.0.1. Fixed in 1.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Docker is a popular containerization platform written in Go. It allows developers to package applications and their dependencies into lightweight, portable containers. Docker provides an efficient and scalable way to deploy and manage applications across different environments. However, a vulnerability has been discovered in Docker that could lead to privilege escalation.
Vulnerability Detail
The vulnerability in Docker allows an attacker to escalate their privileges and gain unauthorized access to the host system. This can result in the compromise of sensitive data, unauthorized execution of commands, and potential control over the entire containerized environment. The vulnerability originates from a flaw in the codebase of the github.com/docker/docker repository.
How To Fix
Latest published version: v28.5.2+incompatible as of 22 Oct 2026
go get github.com/docker/docker@v28.5.2+incompatibleUpgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.0.1
This is the first release that contains the fix.
go get github.com/docker/docker@v1.0.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the recommended fix by updating Docker to the latest version.
Conclusion
The privilege escalation vulnerability in Docker poses a significant risk to the security and integrity of containerized environments. It is crucial for users to update Docker to the latest version to mitigate this vulnerability and ensure the protection of their systems and data.
See every vulnerability recorded for github.com/docker/docker →
FAQ
Docker is a containerization platform that allows developers to package applications and their dependencies into lightweight, portable containers.
Privilege escalation is the act of exploiting a vulnerability to gain higher levels of access or permissions than intended by the system or application.
The Docker vulnerability can allow an attacker to gain unauthorized access to the host system, potentially compromising sensitive data and gaining control over the containerized environment.
Yes, updating Docker to version 1.0.1 or later will address the privilege escalation vulnerability.
No, there are no known workarounds for this vulnerability. Updating Docker to the latest version is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for github.com/docker/docker.
