CVE-2026-103433

A moderate information disclosure flaw was found in Docker Buildx, which is bundled in the Red Hat Ceph Storage 9 alloy container images. Docker Buildx Bake does not request the expected filesystem read (fs.read) approval for certain filesystem inputs. As a result, an untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project directory after entitlement validation checks a different path representation. An attacker who convinces a user to run a malicious Bake definition can access files readable by the Buildx client on the user's system without permission. No privileges are required, but user interaction is needed to run the untrusted definition; only users who run untrusted Bake definitions are affected.

The fix is deferred for the affected Red Hat Ceph Storage 9 streams ceph-9.0 and ceph-9.2 because the flaw is rated moderate impact with a Red Hat CVSS 3.1 score of 5.5, below the threshold at which those streams file errata trackers for moderate severity, so the fix will be delivered in a future product update; the residual risk is disclosure of files readable by the Buildx client on systems where untrusted Bake definitions are executed. The ceph-9.1 stream is affected but out of support scope. Red Hat rates this flaw lower than the upstream CVSS 4.0 score of 6.9 because exploitation requires a local user to run an untrusted Bake definition (local attack vector with user interaction) rather than a remote network attack.