High severity7.1NVD Advisory· Published Mar 25, 2022· Updated Jun 17, 2026

CVE-2022-26659

Description

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log files to a location not writable by non-administrator users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Docker/Desktop2 versions
cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:docker:docker_desktop:*:*:*:*:*:*:*:*range: <4.6.0
- (no CPE)
Docker/Docker Desktop installerllm-create
Range: <4.6.0

Patches

Vulnerability mechanics

References

docs.docker.com/desktop/windows/release-notes/nvdRelease NotesVendor Advisory
docs.docker.com/docker-for-windows/release-notes/nvdRelease NotesVendor Advisory
github.com/hmnthabit/Advisories/blob/master/CVE-2022-26659.mdnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000