1.8
Low
CVE-2026-121542 Bake filesystem path entitlements approval can be skipped for path using basename prefix
Description
In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working directory's basename as a prefix can skip the filesystem entitlement check. Exploitation requires specific matching filenames next to the current project directory. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.
CVSS 4.0 detail
Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NExploitable with local access to the machine, without an account and if a user takes an action; the impact on data or service is limited.
- Attack vector
- Local
- Attack complexity
- Low
- Attack requirements
- Present
- Privileges required
- None
- Interaction
- Active
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Buildx 0.19 | 0.19.0 → < 0.38.1 | 0.38.1 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Docker Buildx
The 4 CVEs of Docker Buildx →
CVE-2026-121541
Bake filesystem path entitlements approval can be skipped in some multi-target builds
5.6
Medium
CVE-2026-93325
Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside…
7.3
High
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
6.9
Medium