5.7Media

CVE-2026-93319A malicious frontend can cause a daemon panic

moby BuildKit Publicada: 2026-10-05 20:47 (hace 1 mes)

Descripción

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

Debilidad (CWE): CWE-567

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
moby	BuildKit	≤ 0.33.0

Referencias y parches

https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8 vendor-advisory
https://github.com/moby/buildkit/releases/tag/v0.33.1 patch

Puntuación CVSS

5.7Media

Fuente: Docker · CVSS 4.0

Vector de ataque: Local
Complejidad: Baja
Requisitos: Presentes
Privilegios: Bajos
Interacción del usuario: Ninguna
Confidencialidad: Ninguno
Integridad: Ninguno
Disponibilidad: Alto

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Todas las puntuaciones (2)

cna	CVSS 4.0	5.7Media
security@docker.com	CVSS 4.0	5.7Media

EPSS (probabilidad de explotación en 30 días)

0.09%

superior al 0 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: none
Automatizable: no
Impacto técnico: partial

Cronología

ID reservado2026-09-17
Publicada2026-10-05 20:47
Llegó a IP-DB2026-10-24 23:47
Última actualización2026-10-06 18:08

Asignada por (CNA): Docker
Estado en NVD: Awaiting Analysis

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Docker / Moby

5.7Media

CVE-2026-123082 ayer

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

4.5Media

CVE-2026-121520 hace 8 días

Malicious client could set xattr value outside of BuildKit state directory

Moby BuildKit

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. name…

6.7Media

CVE-2026-121522 hace 8 días

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

5.6Media

CVE-2026-121541 hace 8 días

Bake filesystem path entitlements approval can be skipped in some multi-target builds

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some …

1.8Baja

CVE-2026-121542 hace 8 días

Bake filesystem path entitlements approval can be skipped for path using basename prefix

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working dire…

7.1Alta

CVE-2026-121614 hace 8 días

Docker Sandboxes host Git executes repository-controlled programs

Docker Docker Sandboxes

Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands. An attacker who can modify a host repository's Git configuration, for example through a direct-mode sandbox w…