high CVSS 8.5

CVE-2025-36355·Docker vulnerability

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.

Severity
high
Software
Docker
Fixed in
11.0.1.0
Published
2025-10-06

Affected versions

From: 11.0.0.0

Until: 11.0.1.0

Fixed in: 11.0.1.0

How to fix this CVE

Docker installations running IBM Security Verify Access versions 11.0.0.0 through 11.0.1.0 contain a local privilege escalation vulnerability that allows authenticated users to execute arbitrary scripts outside the intended security boundaries. Update Docker and verify that IBM Security Verify Access is upgraded to version 11.0.1.0 or later to close this attack surface. After patching, restart all affected containers to ensure the fixed version is running.

sudo dnf update docker-ce -y

Defensia detects this vulnerability

How to check if you are affected

  1. Step 1: Run 'docker --version' to confirm the current Docker version installed on the system
  2. Step 2: Execute 'docker ps -a' and inspect running containers to identify which ones are running IBM Security Verify Access; check container image tags or inspect with 'docker inspect <container_id>' to determine the Verify Access version
  3. Step 3: Search container logs with 'docker logs <container_id> | grep -i script' or 'docker logs <container_id> | grep -i execute' to look for unexpected script execution or privilege escalation attempts
  4. Step 4: Verify the patch by running 'docker exec <container_id> /opt/ibm/verify/bin/version.sh' (or equivalent IBM Verify Access version check) to confirm version 11.0.1.0 or later is deployed

FAQ

What is CVE-2025-36355?

CVE-2025-36355 is a local privilege escalation vulnerability in IBM Security Verify Access Docker containers (versions 11.0.0.0–11.0.1.0) that permits authenticated local users to execute arbitrary scripts beyond their intended authorization scope, potentially leading to container breakout or lateral movement.

Is CVE-2025-36355 being actively exploited?

No, CVE-2025-36355 is not currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog and no public exploit code is available. However, the high CVSS score (8.5) and local attack vector warrant prompt patching in multi-tenant or defense-in-depth environments.

What versions of Docker are affected by CVE-2025-36355?

IBM Security Verify Access versions 11.0.0.0 through 11.0.1.0 running in Docker containers are affected. The vulnerability also affects versions 10.0.0.0 through 10.0.9.0, but all versions should be upgraded to the latest stable release.

How do I check if my server is vulnerable to CVE-2025-36355?

Run 'docker images | grep -i verify' to list IBM Verify Access images, then inspect each with 'docker inspect --format='{{.Config.Labels}}' <image_id>' or check the running container's version using 'docker exec <container_id> cat /opt/ibm/verify/version.txt' (adjust path if needed). Compare the version against 11.0.1.0.

Does Defensia detect CVE-2025-36355?

Yes — Defensia's CVE advisory scanner compares installed package versions against the NVD database. If Docker or IBM Security Verify Access is installed on a monitored server, CVE-2025-36355 will appear in your dashboard with remediation steps.

Related Docker CVEs

CVE-2026-42298CVSS 10Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker-build.yml) allows any unauthenticated user to execute arbitrary code during the Docker build process and exfiltrate a highly privileged GITHUB_TOKEN (write-all permissions). This can be achieved simply by opening a Pull Request from a fork with a maliciously modified Dockerfile.dev. This issue has been patched via commit da44801.
CVE-2026-57572CVSS 10Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browser_config.extra_args, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together with --no-zygote, causing Chromium to fork or exec an attacker-controlled command as the container's runtime user. The Docker API is unauthenticated by default, so a single request yields arbitrary command execution. This issue is fixed in version 0.9.0.
CVE-2026-53576CVSS 10Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter("/api/v1/**")) treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresses its resources by URL path segments that the caller chooses (/api/v1/{tenant}/flows/{namespace}, /api/v1/{tenant}/executions/{namespace}/{id}, /api/v1/{tenant}/namespaces/{namespace}/kv/{key}). An anonymous caller picks the literal configs as the final segment, and the request bypasses Basic-Auth entirely. Because the bypass reaches the flow-create and execution-trigger routes, an unauthenticated caller creates a flow containing a Shell or Process task and runs it. The task executes as root inside the kestra container. The official docker-compose.yml mounts /var/run/docker.sock, so root in the container reaches the host Docker daemon. This vulnerability is fixed in 1.0.45 and 1.3.21.
CVE-2026-33587CVSS 10Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (SSTI) for user-created transformations.
CVE-2026-26216CVSS 10Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.

References

Track CVEs across your fleet automatically

Defensia scans your Linux servers and tells you exactly which ones are running vulnerable versions — including CVE-2025-36355. Free for 1 server.

Get started free