moby BuildKit
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-93321 | ≤ 0.33.0 | Malformed LLB file operation can crash buildkitd | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-93315 | 0.31.0 – < 0.33.1 | BuildKit proxy CA cleanup can be disrupted by build steps | MEDIUM 5.8 | 0.1 % | ||
| CVE-2026-93326 | ≤ 0.33.0 | Crafted Git build source can bypass certain policy validation | MEDIUM 6.0 | 0.2 % | ||
| CVE-2026-93323 | ≤ 0.33.0 | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-93322 | ≤ 0.33.0 | Malformed MergeOp can crash the BuildKit daemon | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-93320 | ≤ 0.33.0 | BuildKit improperly handles special files in build snapshots | MEDIUM 6.0 | 0.1 % | ||
| CVE-2026-93319 | ≤ 0.33.0 | A malicious frontend can cause a daemon panic | MEDIUM 5.7 | 0.1 % | ||
| CVE-2026-93318 | < 0.33.1 | Cache poisoning via unvalidated image layer DiffIDs | HIGH 7.5 | 0.2 % | ||
| CVE-2026-93317 | 0.28.0 – < 0.33.1 | Container blob cache can accept unverified content | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-93316 | < 0.33.1 | Starting daemon with --cdi-disabled flag can lead to panic on specific builds | HIGH 7.1 | 0.2 % | ||
| CVE-2026-75593 | < 0.31.2 | BuildKit: Malicious client can bypass destination directory validation on local sources upload | HIGH 7.2 | 0.5 % | ||
| CVE-2026-61711 | < 0.31.1 | BuildKit: Custom frontend could bypass Seccomp/AppArmor | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-61712 | < 0.31.1 | BuildKit: Possible runtime DoS via unbounded group parsing | LOW 2.3 | 0.4 % | ||
| CVE-2026-15793 | 0.30.0 – 0.31.1 | Git source checkout from a bundle file could lead to command injection | HIGH 7.3 | 0.2 % | ||
| CVE-2026-15792 | < 0.31.2 | Possible panic when incorrect parameters sent from frontend | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-15791 | 0.10.0 – < 0.31.2 | LLB file operation can be tricked to remove /tmp directory contents | LOW 3.3 | 0.2 % | ||
| CVE-2026-15789 | < 0.31.2 | Malicious client can bypass destination directory validation on local sources upload | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-15788 | < 0.31.2 | WCOW cache mount source selector resolves NTFS junctions outside of cache root | MEDIUM 5.6 | 0.4 % | ||
| CVE-2026-33748 | < 0.28.1 | BuildKit Git URL subdir component can cause access to restricted files | HIGH 8.2 | 0.5 % | ||
| CVE-2026-33747 | < 0.28.1 | BuildKit vulnerable to malicious frontend causing file escape outside of storage root | CRITICAL 9.8 | 0.5 % | ||
| CVE-2024-23653 | < 0.12.5 | BuildKit interactive containers API does not validate entitlements check | CRITICAL 9.8 | 3.4 % | ||
| CVE-2024-23652 | < 0.12.5 | BuildKit possible host system access from mount stub cleaner | CRITICAL 10.0 | 2.5 % | ||
| CVE-2024-23651 | < 0.12.5 | BuildKit possible race condition with accessing subpaths from cache mounts | HIGH 8.7 | 0.9 % | ||
| CVE-2024-23650 | < 0.12.5 | BuildKit possible panic when incorrect parameters sent from frontend | MEDIUM 5.3 | 1.1 % | ||
| CVE-2023-26054 | >= 0.10.0, < 0.11.4 | Credentials inlined to Git URLs could end up in provenance attestation in BuildKit | MEDIUM 6.5 | 1.0 % |