{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-121541", "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "state": "PUBLISHED", "assignerShortName": "Docker", "dateReserved": "2026-11-03T14:41:36.745Z", "datePublished": "2026-11-03T22:01:09.960Z", "dateUpdated": "2026-11-03T22:01:09.960Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"version": "0.19.0", "status": "affected", "lessThan": "0.38.1", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "hCaptcha security team"}], "descriptions": [{"lang": "en", "value": "In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1."}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "baseScore": 5.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "The advisory-described fs.read bypass: a victim runs an untrusted multi-target Bake definition, and favorable target iteration order permits disclosure of client-readable files. This metric assesses file disclosure only; it does not assess filesystem-write impacts described in the broader report."}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "shortName": "Docker", "dateUpdated": "2026-11-03T22:01:09.960Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/docker/buildx/security/advisories/GHSA-xg6v-cv2h-2w5h"}], "source": {"discovery": "EXTERNAL"}, "title": "Bake filesystem path entitlements approval can be skipped in some multi-target builds", "solutions": [{"lang": "en", "value": "Upgrade Docker Buildx to v0.38.1 or later."}], "workarounds": [{"lang": "en", "value": "Run only trusted Bake definitions until upgrading. Check that Bake definitions do not contain suspicious paths outside trusted directories."}]}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"lessThan": "0.38.1", "status": "affected", "version": "0.19.0", "versionType": "semver"}]}], "source": "security@docker.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1."}], "id": "CVE-2026-121541", "lastModified": "2026-11-03T22:19:46.593", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@docker.com", "type": "Secondary"}]}, "published": "2026-11-03T22:19:46.593", "references": [{"source": "security@docker.com", "url": "https://github.com/docker/buildx/security/advisories/GHSA-xg6v-cv2h-2w5h"}], "sourceIdentifier": "security@docker.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "security@docker.com", "type": "Secondary"}]}

{}

{"created": "2026-11-04T09:00:16.209811+00:00", "updated": "2026-11-04T09:00:16.209819+00:00", "vendors": []}