{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-121541", "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "state": "PUBLISHED", "assignerShortName": "Docker", "dateReserved": "2026-11-03T14:41:36.745Z", "datePublished": "2026-11-03T22:01:09.960Z", "dateUpdated": "2026-11-03T22:01:09.960Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"version": "0.19.0", "status": "affected", "lessThan": "0.38.1", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "hCaptcha security team"}], "descriptions": [{"lang": "en", "value": "In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1."}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "baseScore": 5.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "The advisory-described fs.read bypass: a victim runs an untrusted multi-target Bake definition, and favorable target iteration order permits disclosure of client-readable files. This metric assesses file disclosure only; it does not assess filesystem-write impacts described in the broader report."}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "shortName": "Docker", "dateUpdated": "2026-11-03T22:01:09.960Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/docker/buildx/security/advisories/GHSA-xg6v-cv2h-2w5h"}], "source": {"discovery": "EXTERNAL"}, "title": "Bake filesystem path entitlements approval can be skipped in some multi-target builds", "solutions": [{"lang": "en", "value": "Upgrade Docker Buildx to v0.38.1 or later."}], "workarounds": [{"lang": "en", "value": "Run only trusted Bake definitions until upgrading. Check that Bake definitions do not contain suspicious paths outside trusted directories."}]}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"lessThan": "0.38.1", "status": "affected", "version": "0.19.0", "versionType": "semver"}]}], "source": "security@docker.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1."}], "id": "CVE-2026-121541", "lastModified": "2026-11-03T22:19:46.593", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@docker.com", "type": "Secondary"}]}, "published": "2026-11-03T22:19:46.593", "references": [{"source": "security@docker.com", "url": "https://github.com/docker/buildx/security/advisories/GHSA-xg6v-cv2h-2w5h"}], "sourceIdentifier": "security@docker.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "security@docker.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/docker/buildx: Docker Buildx: Information disclosure via untrusted multi-target Bake definitions", "id": "2566540", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2566540"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-552", "details": ["In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.", "A flaw was found in Docker Buildx. When building multiple targets simultaneously using an untrusted Bake definition, filesystem paths from certain targets fail to be verified against approved access entitlements. An attacker could exploit this flaw by enticing a user to execute a malicious build definition, resulting in unauthorized information disclosure of local files accessible to the client without required read permissions."], "mitigation": {"lang": "en:us", "value": "Run only trusted Bake definitions and upgrade Docker Buildx to v0.38.1 or later. For rhceph/alloy-rhel10, exposure is limited to the vendored buildx v0.23.0 library; the container neither ships the Buildx client nor invokes Bake multi-target builds."}, "name": "CVE-2026-121541", "package_state": [{"cpe": "cpe:/a:redhat:ceph_storage:9", "fix_state": "Fix deferred", "package_name": "rhceph/alloy-rhel10", "product_name": "Red Hat Ceph Storage 9"}], "public_date": "2026-11-03T22:01:09Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-121541\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-121541\nhttps://github.com/docker/buildx/security/advisories/GHSA-xg6v-cv2h-2w5h"], "statement": "This vulnerability is rated as Moderate severity for Red Hat products because successful exploitation requires user interaction to process an untrusted build configuration, limiting the attack scope to environments evaluating unverified Bake definitions. In typical Red Hat deployments, build workflows rely on trusted and managed project specifications, preventing unprivileged or external actors from triggering the missing entitlement check. Furthermore, the issue only compromises confidentiality of files accessible to the invoking user's local context, without granting code execution or write access to the underlying system.", "threat_severity": "Moderate"}

{"created": "2026-11-04T09:00:16.209811+00:00", "updated": "2026-11-06T02:30:14.080299+00:00", "vendors": [], "weaknesses": ["CWE-552", "CWE-863"]}