IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
5.6Media

CVE-2026-15788WCOW cache mount source selector resolves NTFS junctions outside of cache root

moby BuildKit Publicada: (hace 3 meses)

Descripción

BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon process.

Debilidad (CWE): CWE-59

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
moby BuildKit < 0.31.2
mobyproject buildkit < 0.31.2

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:* < 0.31.2

CVE recientes del mismo producto — Docker / Moby

5.7Media
CVE-2026-123082

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

6.7Media
CVE-2026-121522

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.