Docker Buildx Bake fails to request the expected filesystem read permission when handling certain inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose identifier is interpreted as a pathname, or allow the consumption of a local OCI image layout outside the project after entitlement validation incorrectly resolves a different path representation. This flaw lets an attacker read arbitrary files or access unintended OCI image layouts, compromising confidentiality. The weakness is a form of missing authorization guard.

The vulnerability affects Docker Buildx, the build subsystem used by Docker Engine and Docker Desktop. All versions prior to 0.37.2 are impacted; upgrading to v0.37.2 or later applies the fix. Users who run Buildx must verify they are on or above that version or apply the recommended workaround.

The CVSS score of 6.9 categorizes the flaw as medium severity. No EPSS score is currently available, and the issue is not listed in the CISA KEV catalog. Exploitation requires that an attacker supply or modify a Bake definition that Buildx processes, so the attack vector is local and contingent on executing an untrusted definition. Although no public exploit is reported, the potential for confidential data exposure warrants immediate action.