1. Home
  2. CVE Database
  3. CVE-2025-13743
HIGH · 7.5

CVE-2025-13743

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, e...

Vulnerability Description

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DockerDocker Desktop>= 4.51.0, < 4.54.0

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2025-13743?

CVE-2025-13743 is a vulnerability with a CVSS score of 7.5 (HIGH). Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, e...

How severe is CVE-2025-13743?

CVE-2025-13743 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-13743?

Check the references section above for vendor advisories and patch information. Affected products include: Docker Docker Desktop.