NetSight
high7.5

CVE-2025-13743

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization.

Impact

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.

Affected products

VendorProductAffected versions
DockerDocker Desktop
from 4.51.0 before 4.54.0

Weakness classification

References