CVE-2026-103433GHSA-p54p-jq4x-rc28
Docker Buildx: Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
Docker Docker BuildxContainers & cloudCVSS
6.9MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.29%Chance of exploitation activity in the next 30 days, higher than 20% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 0.37.2Docker BuildxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after entitlement validation checks a different path representation. Users who run untrusted Bake definitions are affected.
Text from CVE List
Affected versions 1
- Docker Buildxaffected: all versions before 0.37.2CVE List