Canadian Cyber Centre warns of Docker Buildx and Docker Desktop vulnerabilities
VULNERABILITYCanadian Centre for Cyber Securityredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Canadian Cyber Centre advisory AV26-1123 (4 November 2026) lists vulnerabilities as of 3 November 2026 in Docker Buildx prior to 0.37.2 and Docker Desktop prior to 4.98.0. Per Docker's release notes, Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx. No CVE identifiers are given in the source. Defenders should upgrade Buildx to 0.37.2 or later and Docker Desktop to 4.98.0 or later, and review the linked Docker security announcements.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Update Docker Buildx to version 0.37.2 or later.
- Update Docker Desktop to version 4.98.0 or later.
- Review the Docker security announcements linked from the Canadian Cyber Centre advisory.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security
Who and what is in it
Companies