7.3
High
CVE-2026-93325 Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
Description
Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.
CVSS 4.0 detail
Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:NExploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Attack requirements
- Present
- Privileges required
- None
- Interaction
- Passive
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Docker Buildx 0.21 | 0.21.0 → < 0.37.2 | 0.37.2 |
Other CVEs of Docker Buildx
The 4 CVEs of Docker Buildx →
CVE-2026-121541
Bake filesystem path entitlements approval can be skipped in some multi-target builds
5.6
Medium
CVE-2026-121542
Bake filesystem path entitlements approval can be skipped for path using basename prefix
1.8
Low
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
6.9
Medium