Sensitive Information Exposure in Docker Desktop Diagnostics from Docker

CVE-2025-13743

What is CVE-2025-13743?

A vulnerability in Docker Desktop allows sensitive information, including expired Personal Access Tokens (PATs), to be unintentionally exposed in the diagnostic logs. This issue arises due to improper serialization of error objects, which may occur when access is denied on certain operations. Consequently, users could unintentionally disclose sensitive data during troubleshooting, particularly when interacting with logs generated during diagnostics. It is essential for users to be aware of this potential exposure when handling diagnostic information.

References