PT-2025-50250 · Docker · Docker Desktop

Published 2025-09-12 · Updated 2025-12-10 · CVE-2025-13743

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Docker Desktop (affected versions not specified)

Description Docker Desktop diagnostics bundles include expired Hub PATs (Personal Access Tokens) in log output because of error object serialization. This can lead to the leakage of sensitive information when exporting diagnostics, particularly when access denied errors occur.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2026-00526

CVE-2025-13743

Affected Products

Docker Desktop

References · 8

• https://osv.dev/vulnerability/CVE-2025-13743 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13743 · Security Note
• https://bdu.fstec.ru/vul/2026-00526 · Security Note
• https://t.me/CVEtracker/39283 · Telegram Post
• https://docs.docker.com/security/security-announcements · Note
• https://twitter.com/CVEnew/status/1998732801651487176 · Twitter Post
• https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#troubleshoot-menu · Note
• https://docs.docker.com/desktop/release-notes · Note