BridgerAlderson/CVE-2025-9074-PoC

GitHubRepository PoCExploit

PoC files

2 files

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

A Bash script that exploits CVE-2025-9074 by connecting to an unauthenticated Docker Engine API, creating a privileged container with host root filesystem mounted, and executing arbitrary commands on the host.

Backdoor review

No backdoor observed in reviewed code

The PoC is a straightforward Bash script that exploits CVE-2025-9074 by using the Docker Engine API to create a container with a host bind mount and execute a user-supplied command. No backdoor, concealed payload, or operator-directed harm was observed. The script performs only the advertised exploit behavior and cleanup.

ClassificationExploit
Model confidence98%
AuthenticationNot required
LanguagesBash
Target softwareDocker DesktopDocker Engine API
Attack typesRemote Code ExecutionPrivilege EscalationContainer Escape
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The script actively exploits the vulnerability by creating a privileged container with host filesystem mounted and executing arbitrary commands, which goes beyond detection or scanning. The README explicitly describes it as 'Proof of Concept exploit code' and the script header states 'Docker API Unauthenticated RCE PoC'.

cve-2025-9074.sh:3-4readme.md:3readme.md:6

Requirements

  • Target must have Docker Engine API exposed on TCP port 2375 without authentication.cve-2025-9074.sh:27-28
  • Attacker must have network access to the target IP and port.cve-2025-9074.sh:25-28

Observed behavior

  • Connects to Docker API at http://<TARGET_IP>:2375 and retrieves engine info.cve-2025-9074.sh:32
  • Detects host OS type from API response to select mount path (Linux: /:/host_root, Windows: /mnt/host/c:/host_root).cve-2025-9074.sh:39-52
  • Enumerates available Docker images on the target.cve-2025-9074.sh:56
  • Creates a new container with host root filesystem bind-mounted inside it.cve-2025-9074.sh:71-81
  • Starts the container and executes an attacker-supplied shell command inside it, effectively running the command on the host with container privileges.cve-2025-9074.sh:94-112
  • Forcefully removes the container after command execution to clean up.cve-2025-9074.sh:117
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Exploit Mechanism
Container breakout via Docker API bind mountThe script creates a container with a host root bind mount and executes a user-supplied command inside it, consistent with the described CVE-2025-9074 exploit.cve-2025-9074.sh:71-77cve-2025-9074.sh:99-112
Target Interaction
Docker Engine API at user-specified IP and portAll network interactions are directed to the target IP and port provided as command-line arguments, with no hardcoded external addresses.cve-2025-9074.sh:25-28
Review boundaries

What the analysis did not establish

  • Evidence is limited to static source code analysis; the script was not executed.
  • The README references an image (line 22) that is not included in the text evidence, so its content cannot be verified.
  • Only the two text files (cve-2025-9074.sh and readme.md) were reviewed; no binary or other files were present in the artifact.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1