A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.8 · mobyprojectNVD modified 2026-10-24 19:10
Affected (CPE criteria) 1
cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*