High · published December 10, 2025
💡 Oops! Expired Hub Personal Access Tokens (PATs) are sneaking into Docker Desktop logs, thanks to a serialization mishap. 📜 Think of this like an old parking pass inadvertently left in your car's glove compartment. You wouldn't want someone to find it and use it to park at your favorite spot, right? If these logs fall into the wrong hands, expired PATs could provide insights into your sensitive operations, like a map leading to a treasure chest that's no longer full. While it’s not an immediate crisis, the potential to expose information is still a risk you don't want to ignore.
Think of this like an old parking pass inadvertently left in your car's glove compartment. You wouldn't want someone to find it and use it to park at your favorite spot, right? This vulnerability occurs due to the serialization of error objects that mistakenly includes expired Hub PATs in Docker Desktop diagnostics bundles, which could be exported and viewed by unauthorized users.
If these logs fall into the wrong hands, expired PATs could provide insights into your sensitive operations, like a map leading to a treasure chest that's no longer full. While it’s not an immediate crisis, the potential to expose information is still a risk you don't want to ignore. To mitigate this issue, upgrade Docker Desktop to the latest version, ensuring that any diagnostics logs do not contain expired PATs. Regularly audit your logs and configure settings to limit sensitive data in exported logs. You've got this! By taking these steps, you’ll keep your Docker environment secure and your logs clean. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| docker/docker_desktop | ≥ 4.51.0, < 4.54.0 | 4.54.0 |