Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-4095 EUVD-2025-12619GHSA-2h62-wf4g-8rpr

Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

Published Apr 29, 2025 · Updated Apr 29, 2025 · Assigned by Docker

Description

Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.

Affected products

VendorProductAffectedFixed
Docker Docker Desktop 4.36.0 – < 4.41.0 4.41.0

Advisories 1

References