Vulnerability · Published Oct 5, 2026 · Assigned by Docker
CVE-2026-103433Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
Medium 6.9
In plain English
A medium-severity missing authorization in Docker Buildx from Docker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Official description
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after entitlement validation checks a different path representation. Users who run untrusted Bake definitions are affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:13 | docker-buildx | no fix listed | DEBIAN-CVE-2026-103433 |
| Debian:14 | docker-buildx | no fix listed | DEBIAN-CVE-2026-103433 |
| Ubuntu:22.04:LTS | docker-buildx | no fix listed | UBUNTU-CVE-2026-103433 |
| Ubuntu:24.04:LTS | docker-buildx | no fix listed | UBUNTU-CVE-2026-103433 |
| Ubuntu:26.04:LTS | docker-buildx | no fix listed | UBUNTU-CVE-2026-103433 |
| Ubuntu:26.10 | docker-buildx | no fix listed | UBUNTU-CVE-2026-103433 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Docker | Docker Buildx | 0 – before 0.37.2 |
Weakness: CWE-862 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N