Skip to content
securitytabs

Docker flags vulnerabilities in Buildx and Desktop, lists fixed versions

Docker says Buildx and Docker Desktop contain vulnerabilities in older releases. Teams using either tool should check their versions against the fixed releases.

Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.

Docker lists fixes for Buildx and Desktop flaws
Docker lists fixes for Buildx and Desktop flaws

Docker disclosed vulnerabilities affecting two of its products as of November 3, 2026: Docker Buildx, the image build tool, and Docker Desktop, its application for developer machines. [1]

The affected versions are Docker Buildx before 0.37.2 and Docker Desktop before 4.98.0. Updated releases are the route to remediation. The advisory excerpt does not describe the flaws, give CVE identifiers or say whether any are exploited. [1]

Explained

The technology and terms in this story. Learn more

Original sources

  1. [1]Canadian Centre for Cyber Security
    Docker security advisory (AV26-1123)