{"id":"CVE-2026-123082","kind":"vulnerability","aliases":["CVE-2026-123082"],"related":[],"title":"Docker Desktop: logs and diagnostics leak Docker Hub access tokens in cleartext","description":"Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker Desktop component logged the token when it requested it from the backend. An attacker with read access to these files could obtain the token and use it to read and modify the user's Docker Hub data as that user while the token remains valid. Docker Desktop 4.94.0 redacts these payloads. The fix does not rewrite logs written by earlier versions, which can still contain tokens after upgrading.","summary":"Docker Desktop before 4.94.0 wrote the signed-in user's Docker Hub access token into application logs and diagnostics bundles. Anyone who can read those files can use the token to read and modify that user's Docker Hub data while the token stays valid.","severity":"medium","cvss":5.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["docker-desktop","docker-hub","macos","runtime","windows"],"not_affected_if":["docker-desktop-4.94.0-or-later","not-signed-in-to-docker-hub"],"how_to_check":"- Check the installed Docker Desktop version (Docker Desktop settings or About dialog) and confirm it is at least `4.94.0`.\n- Search existing Docker Desktop logs and diagnostics bundles for JWT-like strings written before upgrading; the sources say old logs are not rewritten by the fix.","fix":null,"status":"open","published_at":"2026-11-10T15:17:16+00:00","first_seen_at":"2026-11-10T15:22:22+00:00","triaged_at":"2026-11-10T15:22:46+00:00","updated_at":"2026-11-10T15:22:46+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-11-10T15:22:46Z","model":"claude-haiku-5-5","output":{"fix":"- Docker Desktop: move to `4.94.0` or later, which redacts these payloads.\n- Logs written by earlier versions are not rewritten by the fix and may still contain tokens, so review and remove them after upgrading.","reach":"local","title":"Docker Desktop: logs and diagnostics leak Docker Hub access tokens in cleartext","impact":"medium","summary":"Docker Desktop before 4.94.0 wrote the signed-in user's Docker Hub access token into application logs and diagnostics bundles. Anyone who can read those files can use the token to read and modify that user's Docker Hub data while the token stays valid.","audience":"developers","category":"runtime","nicknames":[],"who_cares":["docker-desktop","docker-hub","windows","macos"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"Docker Hub token readable from logs, enabling account data access","analyst_note":"","how_to_check":"- Check the installed Docker Desktop version (Docker Desktop settings or About dialog) and confirm it is at least `4.94.0`.\n- Search existing Docker Desktop logs and diagnostics bundles for JWT-like strings written before upgrading; the sources say old logs are not rewritten by the fix.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["not-signed-in-to-docker-hub","docker-desktop-4.94.0-or-later"],"who_is_affected":"Anyone running Docker Desktop before 4.94.0 who is signed in to Docker Hub. Exposure requires read access to the local logs or diagnostics bundles, and the token stays usable until it is revoked or expires. Users on managed hosting or Docker Engine alone without Docker Desktop are not described as affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.0008,"input_tokens":4671,"output_tokens":665,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-123082':15A,18A '-2026':14A,17A '4.94.0':31B,78C,165C 'access':9A,41B,89C,134C 'anyon':49B 'applic':44B,96C 'array':109C 'attack':131C 'backend':129C 'bare':105C 'bundl':48B,100C 'cleartext':12A,94C 'compon':119C 'contain':182C 'could':79C,138C 'cve':13A,16A 'data':68B,154C 'desktop':2A,21B,29B,75C,118C,164C 'diagnost':5A,47B,99C 'docker':1A,7A,20B,23B,28B,39B,66B,74C,87C,117C,152C,163C 'docker-desktop':19B 'docker-hub':22B 'earlier':177C 'file':54B,137C 'fix':170C 'hub':8A,24B,40B,67B,88C,153C 'ipc':101C 'json':106C 'jwt':92C 'leak':6A 'log':3A,45B,97C,114C,120C,174C 'maco':25B 'modifi':62B,148C 'obtain':139C 'payload':102C,168C 'read':52B,60B,133C,146C 'redact':112C,166C 'remain':161C 'request':125C 'rewrit':173C 'runtim':26B 'sign':35B,83C 'signed-in':34B,82C 'stay':72B 'still':181C 'string':107C 'token':10A,42B,58B,71B,90C,122C,141C,160C,183C 'upgrad':185C 'use':56B,143C 'user':37B,64B,85C,150C,157C 'valid':73B,162C 'version':77C,178C 'window':27B 'write':80C 'written':175C 'wrote':32B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Docker Desktop before 4.94.0 who is signed in to Docker Hub. Exposure requires read access to the local logs or diagnostics bundles, and the token stays usable until it is revoked or expires. Users on managed hosting or Docker Engine alone without Docker Desktop are not described as affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dockerdesktop","dockerhub","macos","medium","runtime","windows"],"campaign_type":null,"search_a":"'-123082':15A,18A '-2026':14A,17A 'access':9A 'cleartext':12A 'cve':13A,16A 'desktop':2A 'diagnost':5A 'docker':1A,7A 'hub':8A 'leak':6A 'log':3A 'token':10A","search_b":"'4.94.0':31B 'access':41B 'anyon':49B 'applic':44B 'bundl':48B 'data':68B 'desktop':21B,29B 'diagnost':47B 'docker':20B,23B,28B,39B,66B 'docker-desktop':19B 'docker-hub':22B 'file':54B 'hub':24B,40B,67B 'log':45B 'maco':25B 'modifi':62B 'read':52B,60B 'runtim':26B 'sign':35B 'signed-in':34B 'stay':72B 'token':42B,58B,71B 'use':56B 'user':37B,64B 'valid':73B 'window':27B 'wrote':32B","search_c":"'4.94.0':78C,165C 'access':89C,134C 'applic':96C 'array':109C 'attack':131C 'backend':129C 'bare':105C 'bundl':100C 'cleartext':94C 'compon':119C 'contain':182C 'could':79C,138C 'data':154C 'desktop':75C,118C,164C 'diagnost':99C 'docker':74C,87C,117C,152C,163C 'earlier':177C 'file':137C 'fix':170C 'hub':88C,153C 'ipc':101C 'json':106C 'jwt':92C 'log':97C,114C,120C,174C 'modifi':148C 'obtain':139C 'payload':102C,168C 'read':133C,146C 'redact':112C,166C 'remain':161C 'request':125C 'rewrit':173C 'sign':83C 'signed-in':82C 'still':181C 'string':107C 'token':90C,122C,141C,160C,183C 'upgrad':185C 'use':143C 'user':85C,150C,157C 'valid':162C 'version':77C,178C 'write':80C 'written':175C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T15:17:16+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security@docker.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123082","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123082","severity":null,"published_at":"2026-11-10T15:17:16+00:00","modified_at":"2026-11-10T15:17:16+00:00","first_seen_at":"2026-11-10T15:22:22+00:00","fetched_at":"2026-11-10T15:22:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}