Docker Buildx and Desktop affected by security vulnerabilities
Docker Buildx prior to 0.37.2 and Docker Desktop prior to 4.98.0 have vulnerabilities.
50
Product
Docker Buildx
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenOct 15, 2026
- Last mentioned4d ago
Timeline
2 articles · newest firstZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
ZDI discloses a Docker Buildx entitlements flaw enabling remote code execution after user interaction.
58
Related CVEs
by mentions- Docker Buildx bake RCE without consent in rawjson mode
Appears with
- Dockervendor · 2
- Zero Day Initiativeorganization · 1
- Docker Desktopproduct · 1
- Canadian Centre for Cyber Securityorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.