Mohan Pedhapati

**Name of the Vulnerable Software and Affected Versions** Docker Desktop versions prior to 4.12.0 **Description** The issue is related to incorrect code generation management in Docker Desktop, allowing a remote attacker to execute arbitrary code via query parameters in the message-box route. This can lead to remote code execution (RCE). **Recommendations** For Docker Desktop versions prior to 4.12.0, update to version 4.12.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the message-box route to minimize the risk of exploitation. Avoid using query parameters in the message-box route until the issue is resolved.