Auth bypass in Docker Desktop

CVE-2025-4095

Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies…

Vulnerability class: Broken Access Control

EPSS: 0.001 (22.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References