Docker Login to Azure Container Registry Using Insecure CLI Password

Duo Tech@duotech

•updated Jul 15, 2026•0•0•2

Detects the use of 'docker login' commands targeting an Azure Container Registry (.azurecr.io) that include a password passed as a plaintext argument via the '-p' or '--password' flags. This practice exposes credentials in process command-line arguments, which may be visible to other users on the system or logged by security tools.