{"id":"CVE-2026-114409","kind":"vulnerability","aliases":["CVE-2026-114409"],"related":[],"title":"Docker Desktop: API keys and OAuth tokens written to local logs in cleartext","description":"Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction. An attacker with read access to these files could obtain the credentials. These OAuth tokens are not Docker account tokens. Docker Desktop 4.94.0 and 4.95.0 addressed the known logging paths, but logs containing credentials can remain after upgrading. Docker Desktop 4.97.0 fixes the issue and includes cleanup of existing host logs and crash dumps.","summary":"Docker Desktop before 4.97.0 wrote third-party API keys and OAuth access tokens in cleartext into local application logs and diagnostics bundles. Anyone who can read those files on the machine can take the credentials.","severity":"medium","cvss":5.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["developers","docker-desktop","macos","runtime","windows"],"not_affected_if":["docker-desktop-4.97.0-or-later","no-third-party-credentials-used"],"how_to_check":"- Run `docker version` or open Docker Desktop's About panel to confirm the installed version is below `4.97.0`\n- Search local Docker Desktop log and diagnostics directories for API key or token strings, as the sources do not name exact paths\n- Check for crash dumps and diagnostics bundles created before upgrading","fix":"- Upgrade Docker Desktop to `4.97.0` or later, which fixes the issue and cleans up existing host logs and crash dumps\n- Upgrading to `4.94.0` or `4.95.0` addressed known logging paths, but logs with credentials can remain, so upgrade to `4.97.0`\n- Rotate any third-party API keys and OAuth tokens that may have been written to logs, since these are not Docker account tokens","status":"open","published_at":"2026-10-27T13:16:56+00:00","first_seen_at":"2026-10-27T13:31:51+00:00","triaged_at":"2026-10-27T13:32:23+00:00","updated_at":"2026-10-27T13:32:23+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-10-27T13:32:23Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Docker Desktop to `4.97.0` or later, which fixes the issue and cleans up existing host logs and crash dumps\n- Upgrading to `4.94.0` or `4.95.0` addressed known logging paths, but logs with credentials can remain, so upgrade to `4.97.0`\n- Rotate any third-party API keys and OAuth tokens that may have been written to logs, since these are not Docker account tokens","reach":"local","title":"Docker Desktop: API keys and OAuth tokens written to local logs in cleartext","impact":"medium","summary":"Docker Desktop before 4.97.0 wrote third-party API keys and OAuth access tokens in cleartext into local application logs and diagnostics bundles. Anyone who can read those files on the machine can take the credentials.","category":"runtime","nicknames":[],"who_cares":["docker-desktop","developers","macos","windows"],"confidence":0.7,"needs_auth":"yes","worst_case":"Third-party API keys and OAuth tokens readable from local log files","analyst_note":"","how_to_check":"- Run `docker version` or open Docker Desktop's About panel to confirm the installed version is below `4.97.0`\n- Search local Docker Desktop log and diagnostics directories for API key or token strings, as the sources do not name exact paths\n- Check for crash dumps and diagnostics bundles created before upgrading","needs_analyst":false,"not_affected_if":["docker-desktop-4.97.0-or-later","no-third-party-credentials-used"],"who_is_affected":"Developers and teams running Docker Desktop on their workstations before 4.97.0 who use third-party API keys or OAuth integrations through local applications. The exposure is through local log and diagnostics files, so a shared machine or a bundle shared for support widens it. Teams on Docker Engine on Linux servers without Docker Desktop are not described as affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000688,"input_tokens":3414,"output_tokens":693,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114409':16A,19A '-2026':15A,18A '4.94.0':116C '4.95.0':118C '4.97.0':30B,67C,134C 'access':39B,77C,98C 'account':112C 'address':119C 'anyon':50B 'api':3A,35B,73C 'applic':45B,83C 'attack':95C 'bundl':49B,87C 'cleanup':140C 'cleartext':13A,42B,80C 'contain':126C 'could':68C,102C 'crash':146C 'credenti':62B,105C,127C 'cve':14A,17A 'desktop':2A,23B,28B,64C,115C,133C 'develop':20B 'diagnost':48B,86C 'docker':1A,22B,27B,63C,111C,114C,132C 'docker-desktop':21B 'due':88C 'dump':147C 'exist':142C 'file':55B,101C 'fix':135C 'host':143C 'includ':139C 'insuffici':90C 'ipc':91C 'issu':137C 'key':4A,36B,74C 'known':121C 'local':10A,44B,82C 'log':11A,46B,84C,122C,125C,144C 'machin':58B 'maco':24B 'oauth':6A,38B,76C,107C 'obtain':103C 'parti':34B,72C 'path':123C 'payload':92C 'read':53B,97C 'redact':93C 'remain':129C 'runtim':25B 'take':60B 'third':33B,71C 'third-parti':32B,70C 'token':7A,40B,78C,108C,113C 'upgrad':131C 'version':66C 'window':26B 'write':69C 'written':8A 'wrote':31B","nicknames":[],"mitigations":[],"who_affected":"Developers and teams running Docker Desktop on their workstations before 4.97.0 who use third-party API keys or OAuth integrations through local applications. The exposure is through local log and diagnostics files, so a shared machine or a bundle shared for support widens it. Teams on Docker Engine on Linux servers without Docker Desktop are not described as affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T13:16:56+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security@docker.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114409","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114409","severity":null,"published_at":"2026-10-27T13:16:56+00:00","modified_at":"2026-10-27T13:16:56+00:00","first_seen_at":"2026-10-27T13:31:51+00:00","fetched_at":"2026-10-27T13:31:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}