7.3
High
CVE-2026-93325 Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside…
Description
Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Buildx 0.21 | 0.21.0 → < 0.37.2 | 0.37.2 |
Other CVEs of Docker Buildx
The 4 CVEs of Docker Buildx →
CVE-2026-121541
Bake filesystem path entitlements approval can be skipped in some multi-target builds
5.6
Medium
CVE-2026-121542
Bake filesystem path entitlements approval can be skipped for path using basename prefix
1.8
Low
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
6.9
Medium