1.8
Low
CVE-2026-121542 Bake filesystem path entitlements approval can be skipped for path using basename prefix
Description
In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working directory's basename as a prefix can skip the filesystem entitlement check. Exploitation requires specific matching filenames next to the current project directory. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.
CVSS 4.0 detail
Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NExploitable with local access to the machine, without an account and if a user takes an action; the impact on data or service is limited.
- Attack vector
- Local
- Attack complexity
- Low
- Attack requirements
- Present
- Privileges required
- None
- Interaction
- Active
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Buildx 0.19 | 0.19.0 → < 0.38.1 | 0.38.1 |
Other CVEs of Docker Buildx
The 4 CVEs of Docker Buildx →
CVE-2026-121541
Bake filesystem path entitlements approval can be skipped in some multi-target builds
5.6
Medium
CVE-2026-93325
Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
7.3
High
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
6.9
Medium