CVE-2025-3911: Exposure in Docker Desktop logs of environment variables configured for running containers
Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc.
A malicious actor with read access to these logs could obtain sensitive credentials information and further use it to gain unauthorized access to other systems. Starting with version 4.41.0, Docker Desktop no longer logs environment variables set by the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3911?
CVE-2025-3911 is considered a medium severity vulnerability due to the potential exposure of sensitive information in Docker Desktop application logs.
How do I fix CVE-2025-3911?
To mitigate CVE-2025-3911, ensure that log access is restricted and avoid logging sensitive environment variables in Docker Desktop.
What types of sensitive information could be exposed by CVE-2025-3911?
CVE-2025-3911 could lead to the exposure of sensitive information such as API keys, passwords, and other confidential environment variables.
Who is affected by CVE-2025-3911?
CVE-2025-3911 affects users of Docker Desktop version 4.41.0 and later configurations.
Can CVE-2025-3911 be exploited remotely?
CVE-2025-3911 requires a malicious actor to have read access to the logs, meaning a remote exploitation is unlikely without prior access.