{"action":"Upgrade github.com/docker/cli to 29.2.0 or later.","affected":[{"fixed":"29.2.0","introduced":"19.03.0"}],"component":"github.com/docker/cli","cve_ids":["CVE-2025-15558"],"ecosystem":"Go","epss":0.00501,"exploited":false,"fixed_versions":["29.2.0"],"ghsa_id":"GHSA-p436-gjf2-799p","id":"tcs_01M5KFGTCSTAX1HZT7GDYN48CC","modified_at":"2026-09-10T03:50:39.956404854Z","published_at":"2026-03-05T00:10:40Z","references":["https://osv.dev/vulnerability/GHSA-p436-gjf2-799p","https://github.com/docker/cli/security/advisories/GHSA-p436-gjf2-799p","https://nvd.nist.gov/vuln/detail/CVE-2025-15558","https://github.com/docker/cli/pull/6713","https://github.com/docker/compose/pull/12300","https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa","https://docs.docker.com/desktop/release-notes","https://github.com/docker/cli","https://www.zerodayinitiative.com/advisories/ZDI-CAN-28304"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-p436-gjf2-799p","url":"https://osv.dev/vulnerability/GHSA-p436-gjf2-799p"},{"source":"nvd","source_id":"CVE-2025-15558","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15558"}],"summary":"Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows"}