CVE-2025-4095 | BDVDB-2026-276558 Detail
DockerDocker Desktop
Description#
Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.
Impact#
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
Weaknesses#
- CWE-862 Missing Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.