Docker Buildx and Desktop affected by security vulnerabilities
Original title: Docker security advisory (AV26-1123)
Docker Buildx prior to 0.37.2 and Docker Desktop prior to 4.98.0 have vulnerabilities.
The Canadian Centre for Cyber Security reports vulnerabilities in Docker Buildx prior to 0.37.2 and Docker Desktop prior to 4.98.0. Users and administrators are encouraged to review the provided web links and apply updates as they become available. Docker Desktop release notes are referenced for Bake filesystem entitlement consent.
- Docker Buildx Prior to 0.37.2
- Docker Desktop Prior to 4.98.0
- Refer to Docker Desktop release notes
- Updates recommended as available
Impact: unauthorized access or data exposure
| Product | Affected |
|---|---|
| Docker Buildx | Prior to 0.37.2 |
| Docker Desktop | Prior to 4.98.0 |
- 1.Review release notes and apply updates
- Vendors
- Docker
- Products
- Docker BuildxDocker Desktop
- Organizations
- Canadian Centre for Cyber Security
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1123 Date: November 4, 2026 As of November 3, 2026, Docker is affected by vulnerabilities in the following products: Docker Buildx Prior to 0. 37. 2 Docker Desktop Prior to 4.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.