Information disclosure in Docker Desktop
CVE-2025-13743
Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occ…
EPSS: 0.000 (10.1th percentile) — read the EPSS interpretation.
Affected products
- Docker Desktop — versions 4.51.0