Docker Buildx (< 0.37.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/docker-buildx--0.37.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 04 Nov 2026 22:03:25 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgDocker Buildx and Docker Desktop security updateshttps://feed.craftedsignal.io/briefs/2026-11-docker-security-advisory/Wed, 04 Nov 2026 22:03:25 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-docker-security-advisory/Docker has addressed a security vulnerability in Docker Buildx where bake filesystem entitlement consent is bypassed when using the --progress=rawjson flag, alongside other general security updates for Docker Desktop.Docker has released security updates for Docker Buildx (versions prior to 0.37.2) and Docker Desktop (versions prior to 4.98.0). The Buildx vulnerability involves a bypass of bake filesystem entitlement consent occurring when the --progress=rawjson flag is utilized. Users and administrators should update to the latest versions to ensure these fixes are applied.

Recommendation

  • Update Docker Buildx to version 0.37.2 or later to mitigate the filesystem entitlement bypass.
  • Update Docker Desktop to version 4.98.0 or later to ensure all security fixes are applied.
  • Review the official Docker security announcements for further details on patches and releases.
]]>mediumadvisoryvulnerabilitycontainer-securitypatch-management