zenzue/CVE-2025-9074

GitHubRepository PoCExploit

PoC files

3 files

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

A Python script that exploits CVE-2025-9074 by connecting to the unauthenticated Docker Engine API from within a container, creating a new container with a bind mount to the Windows host drive, and writing a file to C:\.

Backdoor review

No backdoor observed in reviewed code

The PoC code and README demonstrate the claimed CVE-2025-9074 exploit behavior: connecting to the Docker Engine API and creating a container with a bind mount to write a file on the host. No concealed, deceptive, or unrelated harmful behavior was observed in the supplied text.

ClassificationExploit
Model confidence98%
AuthenticationNot required
LanguagesPython
Target softwareDocker Desktop for Windows
Attack typesprivilege escalationcontainer escape
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact contains executable Python code that actively exploits the vulnerability by using the Docker Engine API to create and start a container with a host bind mount, resulting in a file write to the host filesystem. This goes beyond detection or scanning and constitutes an exploit.

cve_2025_9074_poc.py:38-62README.md:15-17

Requirements

  • Execution from inside a container on a vulnerable Docker Desktop for Windows host where the Docker Engine API is reachable at 192.168.65.7:2375 without authentication.README.md:9README.md:23-25cve_2025_9074_poc.py:3

Observed behavior

  • Sends an HTTP GET request to /_ping on the Docker Engine API to verify connectivity.cve_2025_9074_poc.py:28-29
  • Creates a new container via the Docker Engine API with a bind mount from the host path /mnt/host/c to /host_root inside the container.cve_2025_9074_poc.py:38-44
  • Starts the created container, which executes a shell command to write 'pwned_by_CVE_2025_9074' to a file on the mounted host drive (C:\pwn.txt).cve_2025_9074_poc.py:60-62cve_2025_9074_poc.py:84
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Network Endpoint
http://192.168.65.7:2375Default Docker Engine API target used by the PoC to exploit CVE-2025-9074.cve_2025_9074_poc.py:66-67cve_2025_9074_poc.py:76
File Write
C:\pwn.txtFile created on the Windows host as proof of successful exploitation.cve_2025_9074_poc.py:84cve_2025_9074_poc.py:89
Container Creation
Bind mount /mnt/host/c to /host_rootExploit mechanism to gain write access to the host filesystem from within a container.cve_2025_9074_poc.py:38-45cve_2025_9074_poc.py:69-72
Review boundaries

What the analysis did not establish

  • One file (LICENSE) is omitted from the text evidence; its content is not inspected but is unlikely to alter the classification.
  • The evidence does not include execution output or confirmation that the exploit was successfully run.
  • One file (LICENSE) was omitted from the text evidence; its content was not reviewed.
  • The review is based solely on static source code and documentation; no dynamic analysis was performed.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1