A critical vulnerability in Docker Desktop for Windows and macOS allows compromising the host by running a malicious ...

2. Create the secret from the file with a command like docker secret create tr_secret /home/jack/secrets.txt. Be sure to sub in your Linux username instead of my name.

Docker patched CVE-2025-9074 (CVSS 9.3), a flaw enabling container escape via unauthenticated API, risking host takeover.