CVE-2026-93325High· 7.3▾ Abyssal0dayBuildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 40.2 · likelihood 0 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.
github.com/docker/buildx >= 0.21.0 < 0.37.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Do not run bake with --progress=rawjson on untrusted definitions; another progress mode runs the consent gate.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-103433Medium· 6.9Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs
CVE-2026-121542Low· 1.8Bake filesystem path entitlements approval can be skipped for path using basename prefix
CVE-2026-112917Critical· 9.2Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall
CVE-2026-121541Medium· 5.6Bake filesystem path entitlements approval can be skipped in some multi-target builds
CVE-2026-121614High· 7.1Docker Sandboxes host Git executes repository-controlled programs
CVE-2026-103916High· 8.4Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory