CVE-2025-4095
Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.
Reserved 2025-04-29 | Published 2025-04-29 | Updated 2025-04-29 | Assigner Dockerdocs.docker.com/...rdened-desktop/registry-access-management
Support options
