CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0 , a flaw allows untrusted Bake definitions to bypass filesystem entitlement checks. Specifically, paths under the same parent directory as the current working directory that use the working directory's basename as a prefix can expose files to the ...