Docker
CVE-2026-114409: Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due
CVE-2026-114409 Oct 27, 2026 Source: Vendor
Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction. An attacker with read access to these files could obtain the credentials. These OAuth tokens are not Docker account tokens. Docker Desktop 4.94.0 and 4.95.0 addressed the known logging paths, but logs containing credentials can remain after upgrading. Docker Desktop 4.97.0 fixes the issue and includ
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-114409
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2026-114409
BR2026-0000-034355
unclaimed
Credited as wsl
CVE-2026-114409
BR2026-0000-034356
unclaimed
Credited as Docker Engine
CVE-2026-114409
BR2026-0000-034357
unclaimed
Credited as Javier Yong
CVE-2026-114409
BR2026-0000-034358
unclaimed
Credited as Hashim Jawad (
CVE-2026-114409
BR2026-0000-034359
unclaimed
Credited as Billy Jheng Bing-Jhong, Đỗ Minh Tuấn, Muhammad Alifa Ramdhan working with Trend Micro Zero Day Initiative
CVE-2026-114409
BR2026-0000-034360
unclaimed
Credited as Suman Kumar Chakraborty (