Docker API:

Vulnerability Discovery

Find open Docker APIs, dump env vars, and spot privileged containers

1 guide • Created Apr 4, 2026 • Updated Apr 4, 2026

1 guide

Docker API Unauthenticated Access

Apr 4, 2026 • 3 min read

Docker API vulnerability discovery confirms exploitable weaknesses in the Docker daemon configuration and container setup without using them for access.

Unauthenticated API access on TCP port 2375 or 2376 is the highest-impact finding: it grants full control over the container environment. Exposed Docker sockets (docker.sock) mounted into containers allow those containers to control the daemon. Privileged containers, containers with dangerous capabilities (SYS_ADMIN, SYS_PTRACE), and host PID/network namespace sharing all enable container escape paths.