Skip to content
OpenAdvisories

Package · Ubuntu

docker-buildx

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.3
    CVE-2026-93325

    Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

    Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.

    Docker Docker Buildx docker-buildx docker-buildx Debian Ubuntu
  • Medium 6.9
    CVE-2026-103433

    Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

    Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image …

    Docker Docker Buildx docker-buildx docker-buildx Debian Ubuntu
  • Medium 4.1
    CVE-2025-0495

    Secrets leakage to telemetry endpoint via cache backend configuration via buildx

    Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values may be inad…

    Docker buildx docker-buildx docker-buildx Debian Ubuntu Go