Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-4095

Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

Description

Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Docker Docker Desktop

Default version status: unaffected

  • 4.36.0 to < 4.41.0affected

References