BuildKit: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in BuildKit ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen sowie einen Denial-of-Service-Zustand auszulösen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-374110 linked CVEs
Open advisory with all CVEs
More on BuildKit
Other advisories
- MediumCVE-2026-93319BuildKit: Mehrere Schwachstellen
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-33747CVE-2026-33747 in github.com/moby/buildkit - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-33748CVE-2026-33748 in github.com/moby/buildkit - Patched by Root
- MediumCVE-2026-93321Malformed LLB file operation can crash buildkitd
- MediumCVE-2026-93322Malformed MergeOp can crash the BuildKit daemon
- MediumCVE-2026-93320BuildKit improperly handles special files in build snapshots
- MediumCVE-2026-93323Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
- Not ratedosv:CVE-2026-93321Malformed LLB file operation can crash buildkitd
Other news entries
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3741
ID