5.6Mittel

CVE-2026-121541Bake filesystem path entitlements approval can be skipped in some multi-target builds

Docker Docker Buildx Veröffentlicht: 2026-11-04 01:01 (vor 11 Tagen)

Beschreibung

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.

Schwachstellentyp (CWE): CWE-863

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Docker	Docker Buildx	0.19.0 – < 0.38.1

Referenzen und Patches

https://github.com/docker/buildx/security/advisories/GHSA-xg6v-cv2h-2w5h vendor-advisory

CVSS-Score

5.6Mittel

Quelle: Docker · CVSS 4.0

Angriffsvektor: Lokal
Komplexität: Niedrig
Voraussetzungen: Vorhanden
Rechte erforderlich: Keine
Benutzerinteraktion: Aktiv
Vertraulichkeit: Hoch
Integrität: Keine
Verfügbarkeit: Keine

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Alle Scores (2)

cna	CVSS 4.0	5.6Mittel
security@docker.com	CVSS 4.0	5.6Mittel

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

0.11%

höher als 1 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: none
Automatisierbar: no
Technische Auswirkung: partial

Zeitverlauf

ID reserviert2026-11-03
Veröffentlicht2026-11-04 01:01
Bei IP-DB eingegangen2026-11-04 01:03
Zuletzt aktualisiert2026-11-07 00:40

Vergeben von (CNA): Docker
NVD-Status: Awaiting Analysis

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Docker / Moby

7.3Hoch

CVE-2026-126329 vor 2 Tagen

Docker Sandboxes privilege escalation through untrusted state directories

Docker Docker Sandboxes

Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointing to an attacker-controlled location, a local unprivileged user can substit…

2.4Niedrig

CVE-2026-126330 vor 2 Tagen

Docker Sandboxes restores removed automatically assigned port publications

Docker Docker Sandboxes

Docker Sandboxes can silently republish a sandbox service after an operator removes its automatically assigned host-port mapping. The daemon removes the active binding but retains the original publication request, allowing a later port change or sandbox resta…

5.7Mittel

CVE-2026-123082 vor 4 Tagen

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

4.5Mittel

CVE-2026-121520 vor 11 Tagen

Malicious client could set xattr value outside of BuildKit state directory

Moby BuildKit

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. name…

6.7Mittel

CVE-2026-121522 vor 11 Tagen

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

1.8Niedrig

CVE-2026-121542 vor 11 Tagen

Bake filesystem path entitlements approval can be skipped for path using basename prefix

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working dire…