CVE-2026-103433

A flaw was found in Docker Buildx. This vulnerability allows an attacker to cause information disclosure by convincing a user to run an untrusted Bake build definition. Due to missing filesystem read authorization checks, an untrusted build configuration can access client-side files or container...

CVE-2026-93325

A flaw was found in Docker Buildx. This vulnerability allows unauthorized file access and modification due to an authorization bypass in the bake build command. When a build is executed with the raw JSON progress option enabled, the required prompt for user consent before accessing files outside...