CVE-2025-4095 — Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profi…

CVE-2025-4095

Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile PUBLISHED

Description (CNA)

Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.

Affected (CNA)

Vendor / product	Versions
Docker / Docker Desktop	affected 4.36.0 before 4.41.0

CWE

CWE-862

References

https://docs.docker.com/security/for-admins/hardened-desktop/registry-access-management

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.