CVE-2026-31431 patched; OAuth sign-out during login fixed
New
- The Logs view is now generally available.
- New installations of Docker Desktop for Windows have a choice between per-user (Beta) or all-user installs.
Updates
- Docker Agent v1.50.0
- Docker DHI (dhictl) v0.0.3
- Docker Model Runner v1.1.37
- credential helpers v0.9.6
Security
- The Extensions settings page now includes a security notice that extensions run with host-level privileges and are not audited by Docker.
- Fixed CVE-2026-31431 ("copy.fail") by backporting an upstream Linux kernel patch that prevents an unprivileged container user from gaining root inside the container via a controlled write into the host VM page cache.
Bug fixes and enhancements
For all platforms
- Improvements to Docker Offload idle notifications.
- Fixed the Open Gordon in TUI button not working due to a missing
runsubcommand in Docker Agent command arguments. - Fixed an issue where transient network errors or Docker Hub server errors during sign-in would unexpectedly sign users out instead of retrying automatically.
- Improved data refresh for the Containers, Images, and Volumes screens by fetching up-to-date data on demand when navigating to those screens, reducing background polling load.
- Fixed a kernel crash that could occur when changing filesharing technology after significant container file activity.
- Enable the OpenAI Responses API (
/responses) endpoint in Docker Model Runner. - Fixed a bug where users were unexpectedly signed out of Docker Desktop mid-flow when signing in via
docker loginusing OAuth.
For Windows
- Fixed a bug on Windows where selecting the Docker Desktop taskbar icon multiple times could spawn multiple backend processes. Re-selecting the icon while Docker Desktop is running now brings the dashboard to focus.
- Fixed a race condition on Windows that caused a false-positive "processes still running" dialog to appear when Docker Desktop starts or exits normally.
For Linux
- Support for RHEL 8 has been dropped.