Skip to content
Sign in
5.6 Medium

CVE-2026-121541 Bake filesystem path entitlements approval can be skipped in some multi-target builds

Description

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.

CVSS 4.0 detail

Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Local
Attack complexity
Low
Attack requirements
Present
Privileges required
None
Interaction
Active
Confidentiality
High
Integrity
None
Availability
None
Confidentiality of other systems
None
Integrity of other systems
None
Availability of other systems
None

Affected products and versions

Product Affected versions Fixed in
Docker Buildx 0.19 0.19.0 → < 0.38.1 0.38.1

Other CVEs of Docker Buildx

The 4 CVEs of Docker Buildx →
CVE-2026-121542 Bake filesystem path entitlements approval can be skipped for path using basename prefix 1.8 Low CVE-2026-93325 Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx 7.3 High CVE-2026-103433 Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs 6.9 Medium
Track this CVE