The vulnerability exists in Docker Buildx’s bake command, which normally requires explicit user consent via the --allow flag or an interactive prompt before a build can operate outside the working directory. When docker buildx bake is invoked with the --progress=rawjson option, the consent step is bypassed and omitted entirely. As a consequence, an attacker or untrusted build definition can perform writes or changes to the host filesystem without the owner’s knowledge, potentially leading to unauthorized data modification or privilege escalation.

Docker Buildx, primarily used within Docker Engine. Versions prior to v0.37.2 are affected. The vulnerable behavior occurs in the bake command when progress mode is set to rawjson, regardless of the host operating system, as long as Docker Engine and Buildx are installed.

The CVSS score of 7.3 marks it as Medium‑High severity. The documented exploit path relies on an attacker able to supply or influence a bake definition and invoke bake with --progress=rawjson. Since the vulnerability allows filesystem writes without consent, it is exploitable in any environment where untrusted build definitions are executed. The EPSS score is not available, indicating limited publicly observed exploitation data. The vulnerability is not currently listed in the CISA KEV catalog, suggesting it has not been confirmed as widely exploited, but the high severity and potential for misconfiguration warrant immediate attention.