Insufficient IPC Payload Redaction in Docker Desktop Affects API Keys and OAuth Tokens
CVE-2026-114409

5.7MEDIUM

Key Information:

Vendor

Docker

Status
Docker Desktop
Vendor
CVE Published:
27 October 2026

What is CVE-2026-114409?

Docker Desktop versions prior to 4.97.0 contain a vulnerability where third-party API keys and OAuth access tokens are stored in cleartext within local application logs. This issue stems from inadequate redaction of inter-process communication (IPC) payloads. If an unauthorized user gains read access to these logs, they can extract sensitive credentials. Although versions 4.94.0 and 4.95.0 addressed specific logging paths, remnants of these logs may still persist post-upgrade. Version 4.97.0 resolves this vulnerability and includes measures to clean up existing log files and crash dump data, enhancing overall security.

Affected Version(s)

Docker Desktop Linux 4.39.0 < 4.97.0

Docker Desktop Linux 4.97.0

References

https://docs.docker.com/desktop/release-notes/#4970
release-notes
https://docs.docker.com/desktop/troubleshoot-and-support/...
product

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.