Skip to content
OpenAdvisories

Product · Docker

Docker Buildx

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.8
    CVE-2026-121542

    Bake filesystem path entitlements approval can be skipped for path using basename prefix

    In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working dire…

    Docker Docker Buildx docker.io docker.io-app Debian Ubuntu