---
id: CVE-2026-121542
title: >-
  Bake filesystem path entitlements approval can be skipped for path using
  basename prefix
summary: >-
  In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake
  definition may expose files accessible to the Buildx client without the
  expected fs.read approval. Under certain conditions, paths under the same
  parent directory as th…
severity: low
cvss: 1.8
cvssVector: 'CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: Docker
product: Docker Buildx
affected:
  - buildx >= 0.19.0 < 0.38.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-04T15:15:07.768220Z'
published: '2026-11-03'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T18:20:22.776Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-121542'
references:
  - url: 'https://github.com/docker/buildx/security/advisories/GHSA-rghq-x9hf-hc3r'
tags:
  - cve.org
epss: 0.00145
epssPercentile: 0.03792
ingestedAt: '2026-11-05T21:36:00.486Z'
---

## Overview

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working directory's basename as a prefix can skip the filesystem entitlement check. Exploitation requires specific matching filenames next to the current project directory. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.

## Affected

- `buildx >= 0.19.0 < 0.38.1`

## Remediation

Upgrade Docker Buildx to v0.38.1 or later.

### Workarounds

Run only trusted Bake definitions until upgrading. Check that Bake definitions do not contain suspicious paths outside trusted directories. The issue requires specific matching filenames next to the current project directory.