vulnerability
Docker Desktop: CVE-2025-4095: Missing Authorization
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:M/Au:S/C:N/I:C/A:N) | Apr 29, 2025 | Nov 3, 2025 | Jan 16, 2026 |
Severity
4
CVSS
(AV:L/AC:M/Au:S/C:N/I:C/A:N)
Published
Apr 29, 2025
Added
Nov 3, 2025
Modified
Jan 16, 2026
Description
Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.
Solution
docker-desktop-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.