CVE-2026-93325

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-93325", "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "state": "PUBLISHED", "assignerShortName": "Docker", "dateReserved": "2026-09-17T17:18:36.952Z", "datePublished": "2026-11-03T19:35:47.154Z", "dateUpdated": "2026-11-06T19:52:50.162Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "github.com/docker/buildx", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"version": "0.21.0", "status": "affected", "lessThan": "0.37.2", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Jabr Al-Otaibi working with the Trend Micro Zero Day Initiative"}], "descriptions": [{"lang": "en", "value": "Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped."}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N", "baseScore": 7.3, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-693", "description": "CWE-693: Protection Mechanism Failure", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "shortName": "Docker", "dateUpdated": "2026-11-03T19:35:47.154Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682"}, {"tags": ["patch"], "url": "https://github.com/docker/buildx/releases/tag/v0.37.2"}, {"tags": ["third-party-advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-31688/"}], "source": {"discovery": "EXTERNAL"}, "title": "Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx", "workarounds": [{"lang": "en", "value": "Do not run bake with --progress=rawjson on untrusted definitions; another progress mode runs the consent gate."}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-06T19:52:41.066935Z", "id": "CVE-2026-93325", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T19:52:50.162Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-93325", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-06T19:52:41.066935Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T19:52:46.516Z"}}], "cna": {"title": "Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Jabr Al-Otaibi working with the Trend Micro Zero Day Initiative"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.3, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Docker", "product": "Docker Buildx", "versions": [{"status": "affected", "version": "0.21.0", "lessThan": "0.37.2", "versionType": "semver"}], "packageName": "github.com/docker/buildx", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682", "tags": ["vendor-advisory"]}, {"url": "https://github.com/docker/buildx/releases/tag/v0.37.2", "tags": ["patch"]}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-31688/", "tags": ["third-party-advisory"]}], "workarounds": [{"lang": "en", "value": "Do not run bake with --progress=rawjson on untrusted definitions; another progress mode runs the consent gate."}], "descriptions": [{"lang": "en", "value": "Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-693", "description": "CWE-693: Protection Mechanism Failure"}]}], "providerMetadata": {"orgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "shortName": "Docker", "dateUpdated": "2026-11-03T19:35:47.154Z"}}}, "cveMetadata": {"cveId": "CVE-2026-93325", "state": "PUBLISHED", "dateUpdated": "2026-11-06T19:52:50.162Z", "dateReserved": "2026-09-17T17:18:36.952Z", "assignerOrgId": "686469e6-3ff6-451b-ab8b-cf5b9e89401e", "datePublished": "2026-11-03T19:35:47.154Z", "assignerShortName": "Docker"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageName": "github.com/docker/buildx", "product": "Docker Buildx", "vendor": "Docker", "versions": [{"lessThan": "0.37.2", "status": "affected", "version": "0.21.0", "versionType": "semver"}]}], "source": "security@docker.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped."}], "id": "CVE-2026-93325", "lastModified": "2026-11-06T20:17:29.557", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@docker.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-93325", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T19:52:41.066935Z", "version": "2.0.3"}}]}, "published": "2026-11-03T20:18:19.680", "references": [{"source": "security@docker.com", "url": "https://github.com/docker/buildx/releases/tag/v0.37.2"}, {"source": "security@docker.com", "url": "https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682"}, {"source": "security@docker.com", "url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-31688/"}], "sourceIdentifier": "security@docker.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-693"}], "source": "security@docker.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/docker/buildx: Docker Buildx: Authorization bypass via rawjson progress flag", "id": "2566226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2566226"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "status": "draft"}, "cwe": "CWE-841", "details": ["A flaw was found in Docker Buildx. This vulnerability allows unauthorized file access and modification due to an authorization bypass in the bake build command. When a build is executed with the raw JSON progress option enabled, the required prompt for user consent before accessing files outside the working directory is skipped. An attacker who convinces a user to run a malicious build configuration with this flag can read or alter files on the host system without authorization."], "name": "CVE-2026-93325", "package_state": [{"cpe": "cpe:/a:redhat:ceph_storage:9", "fix_state": "Fix deferred", "package_name": "rhceph/alloy-rhel10", "product_name": "Red Hat Ceph Storage 9"}], "public_date": "2026-11-03T19:35:47Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-93325\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-93325\nhttps://github.com/docker/buildx/releases/tag/v0.37.2\nhttps://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682\nhttps://www.zerodayinitiative.com/advisories/ZDI-CAN-31688/"], "statement": "Red Hat has evaluated this vulnerability as having an Important severity rating because an authorization bypass allows untrusted build files to access and manipulate host system resources outside the intended project directory, resulting in significant confidentiality and integrity impact. In typical Red Hat deployments, native container toolchains such as Podman and Buildah are used instead of Docker Buildx, confining potential exposure to container images or developer environments that bundle this component. Exploitation is not exposed over a remote network service and requires local user interaction to process a specially crafted build configuration under specific raw progress output conditions.", "threat_severity": "Important"}

{"created": "2026-11-03T20:45:01.665601+00:00", "updated": "2026-11-04T15:00:19.485164+00:00", "vendors": []}