In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the approved entitlements. Users who run untrusted Bake definitions may be affected. The issue is fixed in v0.38.1.
CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS Score: 5.6
The advisory-described fs.read bypass: a victim runs an untrusted multi-target Bake definition, and favorable target iteration order permits disclosure of client-readable files. This metric assesses file disclosure only; it does not assess filesystem-write impacts described in the broader report.
| Exploitability Metrics |
Vulnerable System Impact Metrics |
Subsequent System Impact Metrics |
| Attack Vector |
Local |
Confidentiality |
High |
Confidentiality |
None |
| Attack Complexity |
Low |
Integrity |
None |
Integrity |
None |
| Attack Requirements |
Present |
Availability |
None |
Availability |
None |
| Privileges Required |
None |
| User Interaction |
Active |
The advisory-described fs.read bypass: a victim runs an untrusted multi-target Bake definition, and favorable target iteration order permits disclosure of client-readable files. This metric assesses file disclosure only; it does not assess filesystem-write impacts described in the broader report.
CVSS 4.0
Run only trusted Bake definitions until upgrading. Check that Bake definitions do not contain suspicious paths outside trusted directories.
Upgrade Docker Buildx to v0.38.1 or later.