CVE-2026-121542 | Docker Buildx up to 0.38.0 Bake path traversal

November 4, 2026 Yanac

A vulnerability marked as problematic has been reported in Docker Buildx up to 0.38.0. This affects an unknown part of the component Bake. This manipulation causes path traversal.

This vulnerability is handled as CVE-2026-121542. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More