CVE-2026-93325

UNKNOWN 0.0

Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.

CWE	CWE-693
Vendor	docker
Product	docker buildx
Ecosystems	Container
Industries	Technology
Published	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for docker docker buildx

Be the first to know when new unknown vulnerabilities affecting docker docker buildx are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Docker / Docker Buildx

0.21.0 < 0.37.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/docker/buildx/security/advisories/GHSA-gwr2-q96m-6682 github.com: https://github.com/docker/buildx/releases/tag/v0.37.2 zerodayinitiative.com: https://www.zerodayinitiative.com/advisories/ZDI-CAN-31688/

Credits

Jabr Al-Otaibi working with the Trend Micro Zero Day Initiative