CVE-2025-13743: Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs
Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13743?
CVE-2025-13743 has a medium severity due to its potential to leak sensitive information.
How do I fix CVE-2025-13743?
To mitigate CVE-2025-13743, ensure your Docker Desktop logs do not include sensitive data and consider upgrading to the latest version.
What type of information is at risk in CVE-2025-13743?
CVE-2025-13743 risks exposure of expired Hub Personal Access Tokens (PATs) found in Docker Desktop diagnostics logs.
What causes the vulnerability in CVE-2025-13743?
The vulnerability in CVE-2025-13743 is caused by error object serialization that improperly includes sensitive tokens in logs.
Who is affected by CVE-2025-13743?
Users of Docker Desktop are affected by CVE-2025-13743, especially those generating diagnostics bundles.