---
id: CVE-2025-13743
title: >-
  Docker Desktop diagnostics bundles were found to include expired Hub PATs in
  log output due to error object serialization
summary: >-
  Docker Desktop diagnostics bundles were found to include expired Hub PATs in
  log output due to error object serialization. This poses a risk of leaking
  sensitive information in exported diagnostics, especially when access denied
  errors o…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-532
vendor: docker
product: docker_desktop
affected:
  - 'docker_desktop >= 4.51.0, < 4.54.0'
patched:
  - docker_desktop 4.54.0
published: '2025-12-09'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T21:10:00.183'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-13743'
references:
  - url: >-
      https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#troubleshoot-menu
    label: security@docker.com
tags:
  - nvd
epss: 0.00215
epssPercentile: 0.11056
ingestedAt: '2026-10-14T21:57:04.771Z'
---

## Overview

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serialization. This poses a risk of leaking sensitive information in exported diagnostics, especially when access denied errors occurred.

## Affected

- `docker_desktop >= 4.51.0, < 4.54.0`

## Remediation

Upgrade past the affected range:

- `docker_desktop 4.54.0`