Docker security advisory (AV26-1123)

Serial number: AV26-1123
Date: November 4, 2026

As of November 3, 2026, Docker is affected by vulnerabilities in the following products:

• Docker Buildx
  • Prior to 0.37.2
• Docker Desktop
  • Prior to 4.98.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Docker Desktop release notes
• Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
• Docker security announcements