4.3
Medium
CVE-2025-4095 Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers…
Description
Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Desktop 4.36 | 4.36.0 → < 4.41.0 | 4.41.0 |
References
- docs.docker.com docs.docker.com
Timeline
- Published
- Last modified
Other CVEs of Docker Desktop
The 22 CVEs of Docker Desktop →
CVE-2026-112917
Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall
9.2
Critical
CVE-2026-114409
Docker Desktop logs can expose stored third-party credentials
5.7
Medium
CVE-2026-106581
Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop…
8.2
High
CVE-2026-17106
The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer…
7.1
High