7.3
Élevée
CVE-2026-93325 Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside…
Description
Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Docker Buildx 0.21 | 0.21.0 → < 0.37.2 | 0.37.2 |
Références
- github.com github.com
- github.com github.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Docker Buildx
Les 4 CVE de Docker Buildx →
CVE-2026-121541
Bake filesystem path entitlements approval can be skipped in some multi-target builds
5.6
Moyenne
CVE-2026-121542
Bake filesystem path entitlements approval can be skipped for path using basename prefix
1.8
Faible
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
6.9
Moyenne