Docker Desktop Expired Hub Personal Access Token Leakage in Diagnostics Bundles

A vulnerability exists in Docker Desktop where diagnostics bundles unintentionally include expired Hub personal access tokens (PATs) in the log output. This issue arises from the serialization of error objects, which can lead to the unintentional disclosure of sensitive information in exported diagnostics. The problem is particularly pronounced when access denied errors are encountered.

Impact

The inclusion of expired personal access tokens in diagnostics logs creates a risk of leaking sensitive information, which could be exploited if the tokens were still valid.