Description
Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Docker | Docker Desktop | 4.51.0 – < 4.54.0 | 4.54.0 |
Advisories 1
- WID-SEC-2025-2799 Docker Desktop: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Dec 9, 2025