Sensitive Information Disclosure Vulnerability in Docker Desktop by Docker

CVE-2025-1696

What is CVE-2025-1696?

A security vulnerability in Docker Desktop before version 4.39.0 allows for the unintended exposure of sensitive information stored in application logs. Specifically, proxy configuration data may have been recorded in plain text within log files following an HTTP GET request processed through a proxy. This poses a risk, as an attacker with access to these logs could extract the proxy information, facilitating further attacks or unauthorized access. To mitigate this issue, Docker Desktop version 4.39.0 and later no longer logs the proxy string.

References