{"id":"CVE-2026-93325","title":"Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx","summary":"Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.","severity":"high","cvss":7.3,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-693"],"vendor":"Docker","product":"github.com/docker/buildx","affected":["github.com/docker/buildx >= 0.21.0 < 0.37.2"],"published":"2026-11-03","updated":"2026-11-03","sourceUpdated":"2026-11-03T19:35:47.154Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93325","references":[{"url":"https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682"},{"url":"https://github.com/docker/buildx/releases/tag/v0.37.2"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-CAN-31688/"}],"tags":["cve.org"],"epss":0.00134,"epssPercentile":0.02927,"zeroDay":true,"ingestedAt":"2026-11-05T20:33:06.397Z","slug":"CVE-2026-93325","body":"## Overview\n\nBuildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.\n\n## Affected\n\n- `github.com/docker/buildx >= 0.21.0 < 0.37.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nDo not run bake with --progress=rawjson on untrusted definitions; another progress mode runs the consent gate.","depth":"abyssal","depthScore":65,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":25,"ransomware":0},"changes":[]}