Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Docker Buildx 0.38.1 Clear all filters
TI-2026-84836 CVE-2026-121541

Filesystem entitlement check skipped in Docker Buildx Bake multi-target builds

Priority LOW 24

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval.

CVSS 4.0MEDIUM 5.6 Local No auth User interaction EPSS 0.00112 Published 2026-11-03 Partial fix · 0.38.1 CWE-863
TI-2026-84837 CVE-2026-121542

Path check bypass in Docker Buildx Bake exposes unapproved files

Priority LOW 9

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00145 Published 2026-11-03 Partial fix · 0.38.1 CWE-22