What’s Vulnerable › Products

docker model-runner vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your docker model-runner version is affected

Latest docker model-runner vulnerabilities

• CVE-2026-33990 — Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) (CVSS 9.1)
• CVE-2026-28400 — Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint (CVSS 7.5)