Product by Docker
Model-runner
2 known vulnerabilities in Model-runner (Docker), 0 of them actively exploited (CISA KEV).
Key figures
2
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33990 | Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF) | 9.1 | |
| High | CVE-2026-28400 | Docker Model Runner Unauthenticated Runtime Flag Injection via _configure Endpoint | 7.6 |