RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

CVE-2026-121541

A flaw was found in Docker Buildx. When building multiple targets simultaneously using an untrusted Bake definition, filesystem paths from certain targets fail to be verified against approved access entitlements. An attacker could exploit this flaw by enticing a user to execute a malicious build...

Linux Distros Unpatched Vulnerability : CVE-2026-121542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read...

Linux Distros Unpatched Vulnerability : CVE-2026-121541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx...

CVE-2026-103433

A flaw was found in Docker Buildx. This vulnerability allows an attacker to cause information disclosure by convincing a user to run an untrusted Bake build definition. Due to missing filesystem read authorization checks, an untrusted build configuration can access client-side files or container...

CVE-2026-93325

A flaw was found in Docker Buildx. This vulnerability allows unauthorized file access and modification due to an authorization bypass in the bake build command. When a build is executed with the raw JSON progress option enabled, the required prompt for user consent before accessing files outside...

CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

DEBIAN-CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

CVE-2026-121541

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

EUVD-2026-116536

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

CVE-2026-121541 Bake filesystem path entitlements approval can be skipped in some multi-target builds

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

CVE-2026-121541

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

CVE-2026-121541

In Docker Buildx versions v0.19.0 through v0.38.0 , an untrusted Bake definition building multiple targets can expose files to the Buildx client without required fs.read approval. The root cause is that filesystem paths from certain targets are not consistently verified against approved entitleme...

CVE-2026-121542 Bake filesystem path entitlements approval can be skipped for path using basename prefix

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0 , a flaw allows untrusted Bake definitions to bypass filesystem entitlement checks. Specifically, paths under the same parent directory as the current working directory that use the working directory's basename as a prefix can expose files to the ...

CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

CVE-2026-121542 Bake filesystem path entitlements approval can be skipped for path using basename prefix

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

CVE-2026-93325 Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped...

CVE-2026-93325 Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped...

CVE-2026-93325

A protection mechanism failure in Docker Buildx allows for remote code execution (RCE) by failing to properly enforce filesystem entitlements. The vulnerability specifically occurs when processing bake definition files ; when the --progress=rawjson flag is used, the mandatory consent step (normal...