Detections
Analytics

SCA: security update for github.com/docker/model-runner (GHSA-x2f5-332j-9xwq)

medium Tenable Cloud Security Plugin ID 439476

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker. Prior to
 version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange
 flow. When pulling a model, Model Runner follows the realm URL from the registry's WWW-Authenticate header
 without validating the scheme, hostname, or IP range. A malicious OCI registry can set the realm to an
 internal URL (e.g., http://127.0.0.1:3000/), causing Model Runner running on the host to make arbitrary
 GET requests to internal services and reflect the full response body back to the caller. Additionally, the
 token exchange mechanism can relay data from internal services back to the attacker-controlled registry
 via the Authorization: Bearer header. This issue has been patched in version 1.1.25. For Docker Desktop
 users, enabling Enhanced Container Isolation (ECI) blocks container access to Model Runner, preventing
 exploitation. However, if the Docker Model Runner is exposed to localhost over TCP in specific
 configurations, the vulnerability is still exploitable. (CVE-2026-33990)

Solution

Update the github.com/docker/model-runner library and its related packages to version 1.1.25 or later.

See Also

https://github.com/advisories/GHSA-x2f5-332j-9xwq

Plugin Details

Severity: Medium

ID: 439476

Version: Revision 1.15

Type: Local

Family: SCA Checks

Published: 3/30/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

Percentile: 96.73

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Temporal Score: 4.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2026-33990

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 6.8

Threat Score: 4.3

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 3/30/2026

Vulnerability Publication Date: 3/30/2026

Reference Information

CVE: CVE-2026-33990

cwe: CWE-918