Canadian Cyber Centre warns of Docker Buildx and Docker Desktop vulnerabilities
VULNERABILITYCanadian Centre for Cyber Securityredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
The Canadian Centre for Cyber Security advisory AV26-1123, dated 4 November 2026, says Docker Buildx before 0.37.2 and Docker Desktop before 4.98.0 are affected. Docker's release notes describe a flaw where the filesystem entitlement consent step is skipped in Docker Buildx Bake when --progress=rawjson is used.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Update Docker Buildx to version 0.37.2 or later.
- Update Docker Desktop to version 4.98.0 or later.
- Review the Docker security announcements linked from the Canadian Cyber Centre advisory.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security
Who and what is in it
Companies