CVE-2025-13743 — Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs

CVE-2025-13743

Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs PUBLISHED

Description (CNA)

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.

Affected (CNA)

Vendor / product	Versions
Docker / Docker Desktop	affected 4.51.0 before 4.54.0

CWE

CWE-532

References

https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#troubleshoot-menu

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.