CVE-2026-121542

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-121542", "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "state": "PUBLISHED", "assignerShortName": "Docker", "dateReserved": "2026-11-03T14:41:50.995Z", "datePublished": "2026-11-03T21:59:06.193Z", "dateUpdated": "2026-11-04T18:20:22.776Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"version": "0.19.0", "status": "affected", "lessThan": "0.38.1", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "hCaptcha security team"}], "descriptions": [{"lang": "en", "value": "In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working directory's basename as a prefix can skip the filesystem entitlement check. Exploitation requires specific matching filenames next to the current project directory. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1."}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "baseScore": 1.8, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "Limited-disclosure scenario: a victim runs an untrusted Bake definition and client-readable files with matching basename prefixes exist next to the project directory. This score assumes disclosure is limited to noncritical information; that limitation has not been established for all affected deployments. It does not cover exposure of credentials or other critical information, or filesystem-write impacts described in the broader report."}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "shortName": "Docker", "dateUpdated": "2026-11-03T21:59:06.193Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/docker/buildx/security/advisories/GHSA-rghq-x9hf-hc3r"}], "source": {"discovery": "EXTERNAL"}, "title": "Bake filesystem path entitlements approval can be skipped for path using basename prefix", "solutions": [{"lang": "en", "value": "Upgrade Docker Buildx to v0.38.1 or later."}], "workarounds": [{"lang": "en", "value": "Run only trusted Bake definitions until upgrading. Check that Bake definitions do not contain suspicious paths outside trusted directories. The issue requires specific matching filenames next to the current project directory."}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-121542", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-04T15:15:07.768220Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-04T18:20:22.776Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-121542", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-04T15:15:07.768220Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-04T18:12:24.363Z"}}], "cna": {"title": "Bake filesystem path entitlements approval can be skipped for path using basename prefix", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "hCaptcha security team"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 1.8, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "Limited-disclosure scenario: a victim runs an untrusted Bake definition and client-readable files with matching basename prefixes exist next to the project directory. This score assumes disclosure is limited to noncritical information; that limitation has not been established for all affected deployments. It does not cover exposure of credentials or other critical information, or filesystem-write impacts described in the broader report."}]}], "affected": [{"vendor": "Docker", "product": "Docker Buildx", "versions": [{"status": "affected", "version": "0.19.0", "lessThan": "0.38.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade Docker Buildx to v0.38.1 or later."}], "references": [{"url": "https://github.com/docker/buildx/security/advisories/GHSA-rghq-x9hf-hc3r", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "Run only trusted Bake definitions until upgrading. Check that Bake definitions do not contain suspicious paths outside trusted directories. The issue requires specific matching filenames next to the current project directory."}], "descriptions": [{"lang": "en", "value": "In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working directory's basename as a prefix can skip the filesystem entitlement check. Exploitation requires specific matching filenames next to the current project directory. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "shortName": "Docker", "dateUpdated": "2026-11-03T21:59:06.193Z"}}}, "cveMetadata": {"cveId": "CVE-2026-121542", "state": "PUBLISHED", "dateUpdated": "2026-11-04T18:20:22.776Z", "dateReserved": "2026-11-03T14:41:50.995Z", "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "datePublished": "2026-11-03T21:59:06.193Z", "assignerShortName": "Docker"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"lessThan": "0.38.1", "status": "affected", "version": "0.19.0", "versionType": "semver"}]}], "source": "security@docker.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working directory's basename as a prefix can skip the filesystem entitlement check. Exploitation requires specific matching filenames next to the current project directory. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1."}], "id": "CVE-2026-121542", "lastModified": "2026-11-06T21:40:43.450", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.8, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@docker.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-121542", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-04T15:15:07.768220Z", "version": "2.0.3"}}]}, "published": "2026-11-03T22:19:46.737", "references": [{"source": "security@docker.com", "url": "https://github.com/docker/buildx/security/advisories/GHSA-rghq-x9hf-hc3r"}], "sourceIdentifier": "security@docker.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security@docker.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/docker/buildx: Docker Buildx: Information disclosure via filesystem entitlement check bypass", "id": "2566543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2566543"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-22", "details": ["In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working directory's basename as a prefix can skip the filesystem entitlement check. Exploitation requires specific matching filenames next to the current project directory. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.", "A flaw was found in Docker Buildx. This vulnerability allows unauthorized file access when a user executes an untrusted Bake build definition. Due to improper filesystem entitlement validation, paths in the same parent directory that share a prefix with the current working directory name can bypass access controls. Consequently, an attacker who supplies a malicious build definition can expose and read local files accessible to the build client without authorization."], "mitigation": {"lang": "en:us", "value": "Upgrade to Docker Buildx v0.38.1 or later. As a workaround, run only trusted Bake build definitions (per upstream advisory GHSA-rghq-x9hf-hc3r)."}, "name": "CVE-2026-121542", "package_state": [{"cpe": "cpe:/a:redhat:ceph_storage:9", "fix_state": "Fix deferred", "package_name": "rhceph/alloy-rhel10", "product_name": "Red Hat Ceph Storage 9"}], "public_date": "2026-11-03T21:59:06Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-121542\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-121542\nhttps://github.com/docker/buildx/security/advisories/GHSA-rghq-x9hf-hc3r"], "statement": "An information-disclosure flaw was found in Docker Buildx versions v0.19.0\u2013v0.38.0. An untrusted Bake build definition can expose files accessible to the Buildx client without the expected fs.read approval when paths under the same parent directory as the current working directory use the CWD's basename as a prefix, bypassing the filesystem entitlement check. Red Hat Ceph Storage 9 ships buildx only as an indirect, vendored Go dependency of the Alloy container (v0.23.0); the container runtime does not invoke the Buildx Bake code path, so impact is limited to the vendored in-range component. Fixed upstream in v0.38.1.", "threat_severity": "Low"}

{"created": "2026-11-04T09:00:16.211919+00:00", "updated": "2026-11-04T09:00:16.211927+00:00", "vendors": []}