v4.76.0
4.76.0
2026-06-01
New
- Docker Model Runner now supports registry mirrors.
- The
docker sbomcommand has been removed. Use the docker scout sbom command instead.
Updates
- Docker Desktop Build v0.35.0
- Docker Agent v1.62.0
- NVIDIA Container Toolkit v1.19.1
- Docker Compose v5.1.4
- Docker Offload v0.5.93
- Docker Scout CLI v1.21.0
docker passv0.0.29
Security
- Addressed CVE-2026-8936, a VM panic caused by unbounded recursion in the
grpcfusekernel module when a container created deeply nested directories on a bind-mounted host folder and triggered adentryinvalidation event.
Bug fixes and enhancements
For all platforms
- Fixed a race condition in Docker Engine when Resource Saver was active.
- Fixed a bug where anonymous Docker volumes were leaked each time a
kindcluster was deleted, causing orphaned volumes to accumulate. - Fixed column resizing in the All Logs grid so that Timestamp and Object columns no longer expand unexpectedly, and column widths are now preserved across navigation sessions.
- Fixed an issue where Docker Desktop failed to start when a VM disk resize operation encountered an error, even if the underlying filesystem was healthy.
- Fixed an issue that caused Docker Desktop to hang when quit.
- Fixed a bug where CPU and RAM resource totals could get stuck showing 0 in the Docker Desktop Dashboard after stopping or starting Docker Offload.
- Fixed a flicker in Gordon where the final answer text would briefly appear inside the working group before jumping to the response bubble.
- Fixed a daemon panic that could occur during concurrent sign-out and token refresh operations.
- Fixed a bug where the Volumes view showed incorrect mount targets for containers with multiple volumes.
docker passnow has a--forceflag on thesetcommand.docker --helpnow showsdocker pass.- Fixed stale API cache responses (synthetic 404s) for containers, images, networks, volumes, and plugins after restarting an idle-stopped engine via external API calls.
- Fixed a bug where the Delete button on the Builds view might not be visible immediately after selecting a build.
- Fixed time-namespaces being unavailable when Enhanced Container Isolation (ECI) is enabled.
For Windows
- Fixed a regression where the
--quietinstaller flag did not suppress the install-type dialog during silent installation. - Fixed a bug on Windows where a stale PID file with a trailing newline prevented the lingering daemon from being killed, leaving Windows Containers mode unconfigurable.
- Fixed an issue on Windows where triggering an update while another installer instance was already running showed a generic error instead of a specific message.
- Fixed an issue on Windows where the installer and updater executables incorrectly triggered UAC elevation prompts due to Windows heuristic installer detection.
- Fixed double separator in the tray menu when running in Windows container mode.
- Fixed port-binding failures on Windows Hyper-V where
docker run -p 0:Ncould allocate HNS-reserved ports, causing bind errors. - Fixed garbled taskkill error messages in logs on non-English Windows systems.
