5.6
Medium
CVE-2026-121541 Bake filesystem path entitlements approval can be skipped in some multi-target builds
Description
In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.
CVSS 4.0 detail
Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NExploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Attack requirements
- Present
- Privileges required
- None
- Interaction
- Active
- Confidentiality
- High
- Integrity
- None
- Availability
- None
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Buildx 0.19 | 0.19.0 → < 0.38.1 | 0.38.1 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Docker Buildx
The 4 CVEs of Docker Buildx →
CVE-2026-121542
Bake filesystem path entitlements approval can be skipped for path using basename prefix
1.8
Low
CVE-2026-93325
Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside…
7.3
High
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
6.9
Medium