CVE-2025-62725: FROM "DOCKER COMPOSE PS" TO SYSTEM COMPROMISE

Summary from the TLDR InfoSec newsletter

A path traversal vulnerability in Docker Compose allowed attackers to write arbitrary files on host systems by crafting malicious OCI artifacts. The bug was triggered by seemingly harmless commands like 'docker compose ps', enabling attackers to escape the cache directory and gain SSH access by injecting public keys into authorized_keys files. Docker patched this high-severity flaw (CVSS 8.9) in version v2.40.2.