Docker Desktop Updates & Release Notes

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Updates

• Docker Model Runner v1.2.5
• Docker Agent v1.88.1
• Docker Offload v0.6.7
• Docker Compose v5.2.0
• Docker Scout CLI v1.22.0
• DHI CLI (dhictl) v0.0.5

Bug fixes and enhancements

For all platforms

• Fixed an error that caused volumes, images, and containers to fail to load in the Docker Desktop Dashboard.
• Removed the deprecated cagent binary from Docker Desktop; use docker agent instead.
• Kubernetes kind cluster now works with Registry Access Management.
• Fixed a bug where the sign-in/update prompt was not shown when upgrading between versions that cross a version digit boundary (e.g., 4.9.x to 4.10.x).
• Fixed an issue in Ask Gordon where the tool call permission dialog blocked the chat view, replacing it with an inline approval card so users can read Gordon's full message before approving or rejecting.
• Fixed a rare case where Docker Desktop could shut down if the build service crashed, for example during a factory reset.
• Fixed an issue where containers ignored user-configured stop timeouts during normal operation due to a proxy-level override forcing a 1-second timeout on all containers.

For Mac

• Fixed Docker Desktop failing to start when the user's environment contained very long environment variables.
• Fixed a Docker Offload crash on Intel machines due to SG_READ_ONLY not being set in the __DATA_CONST segment, causing the system linker to fail to load the executable. Fixes docker/desktop-feedback#471.

For Windows

• Fixed an issue on Windows where stopping Docker Desktop would immediately force off the Hyper-V VM without waiting for a graceful guest shutdown, reducing the risk of data corruption.
• Fixed a bug on Windows where dockerd failed to connect through the local HTTPS proxy due to a TLS handshake error caused by an incorrect proxy URL scheme.
• Fixed a Windows update that reverted and showed a Mismatch patch version error when it ran again after the target version was already installed.
• Fixed Resource Saver not stopping the Docker engine when running on WSL.
• Fixed a regression where Docker Desktop failed to start on WSL2 kernels that could not attach the Synchronized File Shares eBPF probes, such as Windows on Arm. Fixes docker/desktop-feedback#470.

For Linux

• Fixed a bug where Docker Desktop would fail to start after a reset.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Updates

• Docker Offload v0.6.6
• Docker Buildx v0.35.0
• Docker Model Runner v1.2.4
• containerd v2.2.5
• Docker Engine v29.6.1
• Runc v1.3.6
• Kubernetes v1.36.1
  • CNI plugins v1.9.1
  • cri-tools v1.35.0
  • cri-dockerd v0.3.25
• Updated Kubernetes images:
  • Kubeadm:
    • docker/desktop-storage-provisioner:v4.0
    • docker/desktop-vpnkit-controller:v4.0
    • docker/desktop-kubernetes-etcd:3.6.8-0
    • docker/desktop-kubernetes-coredns:v1.14.2
    • docker/desktop-kubernetes-pause:3.10.2
    • docker/desktop-kubernetes-apiserver:v1.36.1
    • docker/desktop-kubernetes-controller-manager:v1.36.1
    • docker/desktop-kubernetes-scheduler:v1.36.1
    • docker/desktop-kubernetes-proxy:v1.36.1
  • Kind:
    • docker/desktop-containerd-registry-mirror:v0.0.4
    • docker/desktop-cloud-provider-kind:v0.6.0
    • envoyproxy/envoy:v1.36.7

Bug fixes and enhancements

For all platforms

• The experimental docker sandbox plugin has been removed. Migrate to docker sbx.
• Fixed an issue where running out of disk space showed a generic error dialog instead of a clear Disk full message prompting users to free up space and restart.
• Fixed an issue where using docker -c desktop-linux while a cloud context was active would silently route commands to the cloud engine instead of the local desktop Linux engine.
• Fixed a bug where the backend would incorrectly report a stopped VM as running after an idle shutdown, especially when Enhanced Container Isolation was enabled.
• Fixed an OS update notification timing issue where users with auto-download enabled were notified when an update was available rather than when it was ready to install.

For Mac

• Removed the legacy osxfs file sharing. Users still on osxfs are migrated to VirtioFS.
• Increased VirtioFS filesharing performance by not persisting (fake) file ownership changes on the host. Calls to chown will succeed, but stat will not be affected.

For Windows

• Fixed an issue where the Windows installer failed when the destination directory contained leftover files from a previous interrupted installation.
• Fixed an issue on Windows where upgrading Docker Desktop would unnecessarily shut down and unregister unrelated WSL distros via wsl --shutdown.
• Fixed spurious Hyper-V job failures on Windows where operations briefly transitioning through suspended or shutting down states were incorrectly reported as failed.
• Fixed a bug on Windows where Docker Desktop processes could linger as orphans after an unexpected exit or crash.
• Fixed getting stuck on "Starting the Docker Engine…" after an in-place upgrade on Windows when the WSL virtual machine had not been shut down.
• Fixed the tray icon on Windows not matching the system taskbar theme, so the correct light or dark icon is now displayed.
• Fixed a silent failure on Windows where backend startup errors were only written to a log file. Users now see a visible error dialog box when Docker Desktop fails to start.

For Linux

• Fixed a bug where Docker Desktop would fail to start after a reset.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Updates

• Docker Agent v1.79.0
• docker pass v0.1.5
• Docker Desktop CLI v0.4.1
• Docker Offload v0.6.4

Bug fixes and enhancements

For all platforms

• Gordon improvements:
  • Added context-aware suggested questions to the Ask Gordon menu in the Containers, Images, Volumes, and Builds tabs, surfacing relevant diagnostics first when items are in a problematic state.
  • Added a Give feedback link to Gordon so you can report issues with a redacted conversation preview or share product feedback.
  • Fixed a React warning in Gordon's sidebar search input that appeared on the first keystroke when typing a search query.
• Fixed an issue where the Docker Engine settings editor displayed minified JSON instead of formatted JSON when first opened.
• Fixed spurious 500 errors for Docker API calls made right after the VM woke from idle shutdown.
• Fixed spurious 'Integrity issue detected' notifications caused by leftover symlinks from previously bundled binaries.
• Fixed a broken documentation link in the error screen shown when the current user is not a member of the docker-users group.
• Fixed a breaking change to the /app/settings/grouped API that caused integrations such as NVIDIA to stop working correctly.
• Fixed high CPU usage (~30%) on macOS Retina displays caused by SVG animations in the Gordon landing page.
• Fixed an issue where OAuth network errors caused Docker Desktop to incorrectly show users as signed out.
• Fixed an issue where signing in via OAuth would not display the user's username and email in the UI after login.
• QEMU has been updated to v10.2.3
• Logs view improvements
  • Added copy buttons. Copy all visible filtered logs at once or copy individual log entries on hover, respecting the current timestamp visibility setting.
  • Improved the toolbar with a reorganized layout, saved filter presets that now capture container selection and build log visibility, and the ability to persist container filter state.
  • Added the ability to clear logs.
  • Combined copy and expand/collapse buttons into a single pinned column that stays visible during horizontal scrolling, and fixed copy accidentally toggling the row detail pan.
• Fixed Registry Access Management policy downloads to avoid permission denied errors by fetching and caching policies in the user's own directory with tampering detection.

For Mac

• Fixed Docker Desktop failing to start when the user's environment contained very long environment variables.
• Fixed a Docker Offload crash on Intel machines due to SG_READ_ONLY not being set in the __DATA_CONST segment, causing the system linker to fail to load the executable. Fixes docker/desktop-feedback#471.

For Windows

• Fixed an issue on Windows where stopping Docker Desktop would immediately force off the Hyper-V VM without waiting for a graceful guest shutdown, reducing the risk of data corruption.
• Fixed a bug on Windows where dockerd failed to connect through the local HTTPS proxy due to a TLS handshake error caused by an incorrect proxy URL scheme.
• Fixed a Windows update that reverted and showed a Mismatch patch version error when it ran again after the target version was already installed.
• Fixed Resource Saver not stopping the Docker engine when running on WSL.
• Fixed a regression where Docker Desktop failed to start on WSL2 kernels that could not attach the Synchronized File Shares eBPF probes, such as Windows on Arm. Fixes docker/desktop-feedback#470.

For Linux

• Fixed a bug where Docker Desktop would fail to start after a reset.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Updates

• Docker Agent v1.73.0
• docker pass v0.1.4
• Credential helpers v0.9.8

Bug fixes and enhancements

For all platforms

• Fixed an out-of-memory crash that would cause Docker Desktop to become unresponsive or crash while streaming logs in the Docker Desktop Dashboard.
• Improved update reliability by retrying stalled and transient download failures and resuming from the partially downloaded file.
• Added live streaming output to Gordon tool calls so long-running commands like docker compose up display STDOUT/STDERR in real time instead of waiting until completion.
• Added color-coded labels to the Logs view so each container and build source is visually distinguished by a unique color in both the log grid and the container-filter dropdown.
• Improved the error message when the Docker Desktop VM fails to start. It now shows the underlying VirtualizationFramework / libkrun reason instead of the generic Use of closed network connection.
• Fixed a bug where Docker CLI error messages were shown as raw JSON instead of human-readable text while Docker Desktop was in Resource Saver mode.
• Fixed a crash that occurred in the Logs view when deselecting a container filter.
• Fixed an issue where the support page was replaced by the no-virtualization override screen when accessed from the troubleshooting popover.
• Fixed an issue where Docker Desktop failed to start on bare metal EC2 instances (e.g. g4dn.metal) with a Nested virtualization not supported error.
• Increased the retry delay to accommodate transient rename failures caused by antivirus software holding file locks.
• Gordon now shows clear network error messages with guidance to check VPN, proxy, or firewall settings when outbound HTTPS to Docker's services is blocked, instead of a generic agent error.
• Fixed the Gordon AI model picker incorrectly showing an internal model identifier instead of Default for sessions with no explicit model selection.

For Windows

• Added Synchronized file shares support for the WSL2 backend.
• Fixed Docker Desktop getting stuck on Starting the Docker Engine… after an in-place upgrade.
• Fixed a bug where Docker Desktop was not restarted after a failed update was reverted to the previous version.
• Fixed delta updates failing to prepare.
• Fixed an issue on Hyper-V where Docker commands (e.g. docker login) would fail on the first attempt after the engine had been idle-shut-down or paused.
• Fixed an issue on Windows where Docker Desktop showed a generic engine-start failure instead of a clear, actionable error message when WSL is not installed.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

New

• You can now export log data from the Logs view.

Updates

• Docker Offload v0.6.3
• Docker Buildx v0.34.1
• Docker Agent v1.70.0
• Docker MCP gateway v0.42.2
• docker pass v0.1.2
• containerd v2.2.4
• DHI CLI (dhictl) v0.0.4
• Docker Engine v29.5.3

Bug fixes and enhancements

For all platforms

• Increased the retry delay to accommodate transient rename failures caused by antivirus software holding file locks.
• Marketplace extensions are now installed and updated by pinned manifest digest, instead of by tag, protecting against tag mutation after publication.
• Added Buildx version information to the About window.
• Added a case-sensitivity toggle to the Logs search bar which lets you switch between case-insensitive (default) and case-sensitive log filtering.
• Fixed a bug where the mouse wheel scroll was not working in the Logs view grid.
• Fixed an issue where the backend incorrectly exited with error code 150 on clean shutdown via SIGINT or SIGTERM, causing false failure signals.
• Removed the bundled hub-tool binary from Docker Desktop.
• Added working Authenticate and Cancel buttons to the MCP OAuth authorization chat bubble in Gordon, letting you complete or decline OAuth sign-in flows from MCP servers.
• Added two new commands to docker pass :
  • Use docker pass run to inject secrets into host commands.
  • Use docker pass plugins for dynamic plugin management.
• Fixed a regression where docker cp into a container with Enhanced Container Isolation (ECI) enabled set file ownership to nobody:nogroup.

For Windows

• Fixed a bug where Docker Desktop on WSL failed to start with an 'is already mounted' error after a force-killed bootstrap left stale rootfs mounts behind.
• Fixed an issue on Windows where clicking "Quit Docker Desktop" had no effect when the backend had crashed or been killed.
• Fixed an issue on Windows where Docker Desktop processes could linger as orphans after an unexpected exit or crash.
• Fixed getting stuck on "Starting the Docker Engine…" after an in-place upgrade on Windows when the WSL virtual machine had not been shut down.
• Fixed the tray icon on Windows not matching the system taskbar theme, so the correct light or dark icon is now displayed.
• Fixed a silent failure on Windows where backend startup errors were only written to a log file. Users now see a visible error dialog box when Docker Desktop fails to start.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

New

• Docker Model Runner now supports registry mirrors.

Updates

• Docker Desktop Build v0.35.0
• Docker Agent v1.62.0
• NVIDIA Container Toolkit v1.19.1
• Docker Compose v5.1.4
• Docker Offload v0.5.93
• Docker Scout CLI v1.21.0
• docker pass v0.0.29

Security

• Addressed CVE-2026-8936, a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event.

Bug fixes and enhancements

For all platforms

• The docker sbom command has been deprecated and will be removed in a future release. Use the docker scout sbom command instead.
• Fixed a race condition in Docker Engine when Resource Saver was active.
• Fixed a bug where anonymous Docker volumes were leaked each time a kind cluster was deleted, causing orphaned volumes to accumulate.
• Fixed column resizing in the All Logs grid so that Timestamp and Object columns no longer expand unexpectedly, and column widths are now preserved across navigation sessions.
• Fixed an issue where Docker Desktop failed to start when a VM disk resize operation encountered an error, even if the underlying filesystem was healthy.
• Fixed an issue that caused Docker Desktop to hang when quit.
• Fixed a bug where CPU and RAM resource totals could get stuck showing 0 in the Docker Desktop Dashboard after stopping or starting Docker Offload.
• Fixed a flicker in Gordon where the final answer text would briefly appear inside the working group before jumping to the response bubble.
• Fixed a daemon panic that could occur during concurrent sign-out and token refresh operations.
• Fixed a bug where the Volumes view showed incorrect mount targets for containers with multiple volumes.
• docker pass now has a --force flag on the set command.
• docker --help now shows docker pass.
• Fixed stale API cache responses (synthetic 404s) for containers, images, networks, volumes, and plugins after restarting an idle-stopped engine via external API calls.
• Fixed a bug where the Delete button on the Builds view might not be visible immediately after selecting a build. Fixes docker/desktop-feedback#329 and fixes docker/desktop-feedback#330.
• Fixed time-namespaces being unavailable when Enhanced Container Isolation (ECI) is enabled.

For Windows

• Fixed a regression where the --quiet installer flag did not suppress the install-type dialog during silent installation.
• Fixed a bug on Windows where a stale PID file with a trailing newline prevented the lingering daemon from being killed, leaving Windows Containers mode unconfigurable.
• Fixed an issue on Windows where triggering an update while another installer instance was already running showed a generic error instead of a specific message.
• Fixed an issue on Windows where the installer and updater executables incorrectly triggered UAC elevation prompts due to Windows heuristic installer detection.
• Fixed double separator in the tray menu when running in Windows container mode.
• Fixed port-binding failures on Windows Hyper-V where docker run -p 0:N could allocate HNS-reserved ports, causing bind errors.
• Fixed garbled taskkill error messages in logs on non-English Windows systems (For example, Chinese Windows using GBK encoding).
• Fixed unbounded growth of the WSL2 ISO cache. Old docker-desktop.iso and docker-wsl-cli.iso entries are now removed when a new version is installed. Fixes docker/desktop-feedback#419.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Updates

• Docker Offload v0.5.92
• Docker Engine v29.5.2
• Docker Buildx v0.34.0

Bug fixes and enhancements

For all platforms

• Removed the Docker Scout view and disabled Scout-related OS notifications and notification popups.
• Added support for time namespacing in ECI protected containers.
• Fixed a bug where the http_proxy environment variable could prevent kind clusters from pulling local images.
• Fixed a 500 Internal Server Error that could occur on the first Docker API call right after the VM wakes up from idle shutdown.
• Fixed broken images in Docker Hub image descriptions caused by relative URLs being resolved to invalid app:// scheme URLs.

For Mac

• Added a warning dialog that appears at startup when Docker Desktop is running from a staging directory due to a failed update. Also adds a link to download a fresh install.

For Windows

• WSL integration with the default distribution has been disabled. To change this, visit Settings.
• Fixed a bug where docker compose up failed with an EOF error on Windows with a Hyper-V backend, when accepting a file-sharing consent prompt.
• Fixed Windows installer bugs that could cause incorrect backend mode detection or unexpected directory creation during installation.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

New

• Gordon is now generally available. New usage plans are also available. Paid Gordon plans unlock higher usage limits.

Updates

• Docker Offload v0.5.89
• Docker Agent v1.57.0
• Credential helpers v0.9.7
• docker pass v0.0.26

Bug fixes and enhancements

For all platforms

• Fixed a bug where Docker Desktop's own Electron helper processes (GPU, renderer, utility) were incorrectly detected and killed as lingering processes on startup when launching from the Start menu, causing a crash loop.
• Fixed an issue where the View build logs toggle in Logs view display settings was reset after restarting Docker Desktop instead of persisting the user's preference.
• Docker Extensions is now disabled by default.

For Mac

• Fixed published ports being inaccessible when a container is also connected to a Swarm overlay network.
• Fixed dashboard TLS failures in some corporate environments.
• Improved GUI security via content hash validation.

For Linux

• Added support for Ubuntu 26.04.

Security

• Fixed CVE-2026-31431 by backporting an upstream Linux kernel patch that prevents an unprivileged container user from gaining root inside the container via a controlled write into the host VM page cache.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Updates

• Docker Engine v29.4.3
• Docker Agent v1.54.0

Bug fixes and enhancements

For all platforms

• Fixed Cmd+Q (Mac) and Ctrl+Q (Windows/Linux) not fully quitting Docker Desktop. Fixes docker/for-mac#7833.
• Fixed a bug where canceling docker load left a containerd ref lock held, causing subsequent loads of the same image to fail.
• Fixed an issue where Docker Desktop made unnecessary network requests to mcp.docker.com on sign-in when MCP Toolkit was disabled, causing unexpected proxy authentication prompts.
• Fixed an issue where the search input in Gordon's session sidebar would not close if it was left empty.

For Mac

• Fixed excessive memory usage on Apple Silicon Macs by improving the Linux VM's ability to return freed container memory back to the host OS.
• Fixed a bug where containers received connections with a corrupted source IP when another container had an active outbound connection to an IP in the same subnet range. Fixes docker/for-mac#7824.

For Windows

• Fixed a bug on Windows where selecting the Docker Desktop taskbar icon multiple times could spawn multiple backend processes. Re-selecting the icon while Docker Desktop is running now brings the dashboard to focus.
• Fixed a race condition on Windows that caused a false-positive "processes still running" dialog to appear when Docker Desktop starts or exits normally.

For Linux

• Support for RHEL 8 has been dropped.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

New

• The Logs view is now generally available.
• New installations of Docker Desktop for Windows have a choice between per-user (Beta) or all-user installs.

Updates

• Docker Agent v1.50.0
• Docker DHI (dhictl) v0.0.3
• Docker Model Runner v1.1.37
• credential helpers v0.9.6

Security

• The Extensions settings page now includes a security notice that extensions run with host-level privileges and are not audited by Docker.
• Fixed CVE-2026-31431 ("copy.fail") by backporting an upstream Linux kernel patch that prevents an unprivileged container user from gaining root inside the container via a controlled write into the host VM page cache.

Bug fixes and enhancements

For all platforms

• Improvements to Docker Offload idle notifications.
• Fixed the Open Gordon in TUI button not working due to a missing run subcommand in Docker Agent command arguments.
• Fixed an issue where transient network errors or Docker Hub server errors during sign-in would unexpectedly sign users out instead of retrying automatically.
• Improved data refresh for the Containers, Images, and Volumes screens by fetching up-to-date data on demand when navigating to those screens, reducing background polling load.
• Fixed a kernel crash that could occur when changing filesharing technology after significant container file activity.
• Enable the OpenAI Responses API (/responses) endpoint in Docker Model Runner.
• Fixed a bug where users were unexpectedly signed out of Docker Desktop mid-flow when signing in via docker login using OAuth.

For Windows

• Fixed a bug on Windows where selecting the Docker Desktop taskbar icon multiple times could spawn multiple backend processes. Re-selecting the icon while Docker Desktop is running now brings the dashboard to focus.
• Fixed a race condition on Windows that caused a false-positive "processes still running" dialog to appear when Docker Desktop starts or exits normally.

For Linux

• Support for RHEL 8 has been dropped.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Important

Support for RHEL 8 has ended. Installing Docker Desktop will require RHEL 9 or RHEL 10 in the next release.

Updates

• Docker Model Runner v1.1.36
• containerd to v2.2.3
• Runc v1.3.5
• Docker Compose v5.1.3
• Docker Agent v1.44.0
• Docker Engine v29.4.1

Bug fixes and enhancements

For all platforms

• Docker Model Runner is now disabled by default and must be explicitly enabled in Settings. When enabled, TCP host-side support is automatically active.
• Fixed an issue where downloading a Docker Desktop update would fail without a clear error if the disk had insufficient free space.
• Fixed an issue where Docker Scout tag recommendations, when inspecting an image, failed when the base image digest or repository name was empty.
• Added a Switch to local Docker context button on the sign-in screen, allowing users in a cloud context to switch back to their local context without signing in.
• Added a dedicated Stopped status screen for the cloud engine so users see a clear stopped state instead of an error screen when transitioning away from Docker Offload.

For Mac

• Fixed an issue where error tracking would temporarily continue sending session data directly after a user disabled analytics. Fixes docker/for-mac#7768.

For Windows

• Fixed a critical issue where Docker Desktop Dashboard failed to open with ERR_FAILED errors caused by process hardening policies conflicting with Chromium.
• Fixed a bug where Kubernetes could fail to start on WSL 2 when HTTP_PROXY environment variables are set in WSL 2 itself.
• Fixed a bug in Enhanced Container Isolation (ECI) that was causing loss of container rootfs persistence across Docker Desktop restarts, when using WSL.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

New

• Added a CLI hint that surfaces the Logs view when running logs, compose logs, compose attach, or compose up commands, giving you quick access to logs across all running containers. Available with the Logs (Beta) feature enabled.

Updates

• Docker Compose v5.1.2
• Docker Engine v29.4.0
• Docker Agent v1.43.0
• Docker Model Runner v1.1.33
• Docker Scout CLI v1.20.4

Bug fixes and enhancements

For all platforms

• Fixed a bug where docker login could fail silently in CI environments due to slow Docker Hub responses causing credential store update timeouts.
• Fixed an issue where disabling Beta features also disabled Docker Model Runner.
• Fixed docker desktop start causing the Docker AI agent API daemon to fail due to an inherited CLI plugin environment variable.

For Mac

• Fixed a crash loop where Docker Desktop repeatedly failed to start with exit status 42 after an update due to a corrupted DockerAppLaunchPath setting.
• Fixed an issue where a failed update could leave Docker Desktop in a broken state. The installer now automatically reverts to the previous version and shows a clear error message.
• Fixed a bug where stopping one container could disrupt active Unix socket forwards belonging to other running containers.

For Windows

• Fixed an issue where a failed update could leave Docker Desktop in a broken state. The installer now automatically reverts to the previous version and shows a clear error message.
• Fixed a bug where a failed switch to Windows containers could leave Docker Desktop in a broken state, requiring a restart.
• Fixed an issue where Docker Desktop failed to launch for users with DEVHOME set in their environment.
• Temporarily rolled back process hardening that caused Electron crashes on Windows. Fixes docker/desktop-feedback#245.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

Updates

• Docker Agent v1.42.0
• Docker Model v1.1.29
• containerd v2.2.2
• Docker Buildx v0.33.0

Bug fixes and enhancements

For all platforms

• Fixed an issue where docker logout from the CLI was ignored by Docker Desktop when OAuth tokens remained in the credential store, leaving the user unexpectedly signed in.
• Fixed an issue where Docker Desktop could unexpectedly sign users out when unrelated credential updates, docker login, or transient network errors triggered a sign-out.
• Fixed a data loss issue where backup data could be deleted during a failed restore operation, leaving users with no data.
• Fixed an issue where sign-in credentials (login-info.json) could be included in diagnostic bundles, improving privacy and security. Note that this file contains an encoded organisation(s) name, plan name, encoded username, and encoded email only. No passwords or credentials are included.
• Fixed the footer update label incorrectly showing Downloading during the prepare/unpack phase of an update. It now correctly displays Preparing.
• Fixed an issue where Docker Desktop would not start when the internal storage disk was full.

For Mac

• Fixed an issue where the in-app update button was not disabled when Docker.app was installed in a non-user-writable directory, preventing failed update attempts.
• Fixed update failure for users who installed Docker Desktop via Homebrew on Mac.

For Windows

• Fixed an unexpected WSL terminal popup appearing for Windows users using the Hyper-V backend during Docker Desktop installation or uninstallation.
• Fixed an issue on Windows where factory reset deleted CLI plugins from ~/.docker/cli-plugins, causing docker build to fall back to the legacy builder.
• Fixed a bug where Kubernetes failed to start when WSL integration was enabled alongside another distro using cgroup v1 controllers.
• Fixed a race condition that caused Kubernetes to fail to start when a Registry Access Management policy change occurred during startup.
• Prevent Docker Desktop from fatally failing due to transient 'Access is denied' errors during file operations on Windows.

Security

• Addressed CVE-2026-33990, SSRF in Docker Model Runner OCI Registry Client.

Download Docker Desktop

• Windows (checksum)
• Windows ARM Early Access (checksum)
• Mac with Apple chip (checksum)
• Mac with Intel chip (checksum)
• Debian - RPM - Arch (checksum)

New

• Gordon now has persistent local memory, allowing it to remember your preferences and context across sessions.

Updates

• Docker Agent v1.39.0
• Docker Model v1.1.28

Bug fixes and enhancements

For all platforms

• Fixed a deadlock in Enhanced Container Isolation that caused containers to hang indefinitely during creation when ECI was enabled.
• Added a warning banner to alert when an MCP server is community-provided and has not been verified by Docker.
• Added a persistent Show timestamps toggle to the Logs view, allowing timestamps to be hidden in both table and visualiser views across sessions.
• Fixed an issue where Docker Desktop frontend processes were not properly terminated on quit.
• Fixed a deadlock when settings controlled by admins reload that could cause Docker Desktop to become unresponsive during sign in or sign out operations.
• Fixed a bug where Docker Desktop could fail to start due to uncorrectable filesystem errors on the disk image not being repaired.
• Fixed a bug that caused Enhanced Container Isolation (ECI) to inadvertently block startup of Kubernetes clusters.
• Fixed an issue where a failed volume size fetch could make the Volumes view inaccessible; container counts on volumes now correctly exclude bind mounts.
• Fixed race conditions in volume backup that could cause containers to be incorrectly restarted, export logs to be corrupted, or runtime panics when scheduling tasks.
• Fixed a crash in the API cache that occurred when containers with no names caused a panic disrupting container listing.
• Fixed a bug where starting a container could fail with ENOENT if a bind-mount parent directory was deleted while no container was using it.

For Mac

• Fixed a security vulnerability where tampered user-deployed config profiles could bypass organization sign-in enforcement.
• Fixed a bug where a failed vmnetd handshake could dispatch a bogus command on a broken connection, causing unexpected networking errors.
• Fixed a bug where the Docker Desktop Dashboard could be prematurely displayed when restoring to a fullscreen state on launch.
• Fixed nested bind mounts showing empty child mount content on VirtioFS when using Docker Compose with multiple services sharing a volume. Fixes docker/desktop-feedback#264.

For Windows

• Fixed an issue where the installer extraction did not update the progress bar and could take around 5 minutes, depending on the machine. Extraction is now ~60% faster and includes proper progress updates.
• Fixed a race condition where container ports would sometimes not be published correctly after container start, affecting ephemeral ports, --publish-all, and gateway IP bindings.
• Fixed an issue where a failed WSL distro move could leave the distro unregistered.