{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.31.0"}],"component":"github.com/docker/compose/v2","cve_ids":["CVE-2025-15558"],"ecosystem":"Go","epss":0.00549,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p436-gjf2-799p","id":"tcs_01M5KGEV8NGVX1S9D43HCE9NHA","modified_at":"2026-03-23T04:56:01.172729157Z","published_at":"2026-03-10T18:28:25Z","references":["https://osv.dev/vulnerability/GO-2026-4610","https://github.com/docker/cli/security/advisories/GHSA-p436-gjf2-799p","https://github.com/docker/cli/commit/13759330b1f7e7cb0d67047ea42c5482548ba7fa","https://github.com/docker/cli/pull/6713","https://github.com/docker/compose/pull/12300","https://docs.docker.com/desktop/release-notes","https://www.zerodayinitiative.com/advisories/ZDI-CAN-28304"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GO-2026-4610#Go/github.com/docker/compose/v2","url":"https://osv.dev/vulnerability/GO-2026-4610"},{"source":"nvd","source_id":"CVE-2025-15558","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15558"}],"summary":"Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli"}