Medium severity · published Apr 29, 2025
CVE-2025-4095
Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
4.3
CVSS
0.2%
EPSS
No
On KEV
Description
Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DD
Docker Desktop · Docker
4.36.0 before 4.41.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-4095
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-4095
docs.docker.com
https://docs.docker.com/security/for-admins/hardened-desktop/registry-access-management
More from Docker Desktop
9.8
CVE-2024-8696
A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2.
9.8
CVE-2024-8695
A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2.
9.8
CVE-2023-0626
Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
9.8
CVE-2023-0625
Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
9.3
CVE-2025-9074
Docker Desktop allows unauthenticated access to Docker Engine API from containers