Docker Buildx
Monthly
Information disclosure and entitlement bypass in Docker Buildx Bake allows an attacker-supplied Bake definition to read files that should have required an explicit fs.read entitlement approval. An unauthenticated attacker can craft a definition that exposes a readable file via a pathless secret whose ID is interpreted as a client-side pathname, or that consumes a local OCI image layout outside the project because entitlement validation checks a different path representation than the one actually used. Exploitation requires the victim to run an untrusted Bake definition (CVSS 4.0 AV:N/AC:L/PR:N/UI:A, assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), impact is read-only with no code execution, write, or availability loss, and no public exploit has been identified at time of analysis; environments that build only their own trusted first-party Bake definitions are not exposed. This is a genuine but moderate-priority entitlement-bypass issue rather than a critical remote threat.
Information disclosure and entitlement bypass in Docker Buildx Bake allows an attacker-supplied Bake definition to read files that should have required an explicit fs.read entitlement approval. An unauthenticated attacker can craft a definition that exposes a readable file via a pathless secret whose ID is interpreted as a client-side pathname, or that consumes a local OCI image layout outside the project because entitlement validation checks a different path representation than the one actually used. Exploitation requires the victim to run an untrusted Bake definition (CVSS 4.0 AV:N/AC:L/PR:N/UI:A, assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), impact is read-only with no code execution, write, or availability loss, and no public exploit has been identified at time of analysis; environments that build only their own trusted first-party Bake definitions are not exposed. This is a genuine but moderate-priority entitlement-bypass issue rather than a critical remote threat.