6.9Media

CVE-2026-103433Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions

Docker Docker Buildx Publicada: 2026-10-06 00:54 (hace 1 mes)

Descripción

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after entitlement validation checks a different path representation. Users who run untrusted Bake definitions are affected.

Debilidad (CWE): CWE-862

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
Docker	Docker Buildx	< 0.37.2

Referencias y parches

https://github.com/docker/buildx/security/advisories/GHSA-p54p-jq4x-rc28 vendor-advisory
https://github.com/docker/buildx/releases/tag/v0.37.2 patch
https://github.com/docker/buildx product
https://docs.docker.com/build/bake/reference/#targetentitlements technical-description

Puntuación CVSS

6.9Media

Fuente: Docker · CVSS 4.0

Vector de ataque: Red
Complejidad: Baja
Requisitos: Ninguno
Privilegios: Ninguno
Interacción del usuario: Activa
Confidencialidad: Alto
Integridad: Ninguno
Disponibilidad: Ninguno

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Todas las puntuaciones (2)

cna	CVSS 4.0	6.9Media
security@docker.com	CVSS 4.0	6.9Media

EPSS (probabilidad de explotación en 30 días)

0.29%

superior al 22 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: none
Automatizable: no
Impacto técnico: partial

Cronología

ID reservado2026-09-30
Publicada2026-10-06 00:54
Llegó a IP-DB2026-10-24 23:43
Última actualización2026-10-06 18:08

Asignada por (CNA): Docker
Estado en NVD: Awaiting Analysis

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Docker / Moby

7.3Alta

CVE-2026-126329 ayer

Docker Sandboxes privilege escalation through untrusted state directories

Docker Docker Sandboxes

Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointing to an attacker-controlled location, a local unprivileged user can substit…

2.4Baja

CVE-2026-126330 ayer

Docker Sandboxes restores removed automatically assigned port publications

Docker Docker Sandboxes

Docker Sandboxes can silently republish a sandbox service after an operator removes its automatically assigned host-port mapping. The daemon removes the active binding but retains the original publication request, allowing a later port change or sandbox resta…

5.7Media

CVE-2026-123082 hace 3 días

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

4.5Media

CVE-2026-121520 hace 9 días

Malicious client could set xattr value outside of BuildKit state directory

Moby BuildKit

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. name…

6.7Media

CVE-2026-121522 hace 9 días

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

5.6Media

CVE-2026-121541 hace 9 días

Bake filesystem path entitlements approval can be skipped in some multi-target builds

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some …