Product by Moby
BuildKit
25 known vulnerabilities in BuildKit (Moby), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-23653 | BuildKit interactive containers API does not validate entitlements check | 9.8 | |
| Critical | CVE-2024-23652 | BuildKit possible host system access from mount stub cleaner | 10.0 | |
| High | CVE-2024-23651 | BuildKit possible race condition with accessing subpaths from cache mounts | 8.7 | |
| High | CVE-2026-75593 | BuildKit: Malicious client can bypass destination directory validation on local sources upload | — | |
| Critical | CVE-2026-33747 | BuildKit vulnerable to malicious frontend causing file escape outside of storage root | 8.4 | |
| High | CVE-2026-33748 | BuildKit Git URL subdir component can cause access to restricted files | 7.5 | |
| High | CVE-2026-15788 | WCOW cache mount source selector resolves NTFS junctions outside of cache root | 7.5 | |
| High | CVE-2026-93318 | Cache poisoning via unvalidated image layer DiffIDs | — | |
| High | CVE-2026-93316 | Starting daemon with --cdi-disabled flag can lead to panic on specific builds | — | |
| Medium | CVE-2023-26054 | Credentials inlined to Git URLs could end up in provenance attestation in BuildKit | 6.5 | |
| Medium | CVE-2024-23650 | BuildKit possible panic when incorrect parameters sent from frontend | 5.3 | |
| Medium | CVE-2026-93321 | Malformed LLB file operation can crash buildkitd | — | |
| Medium | CVE-2026-93322 | Malformed MergeOp can crash the BuildKit daemon | — | |
| Medium | CVE-2026-93323 | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory | — | |
| High | CVE-2026-15789 | Malicious client can bypass destination directory validation on local sources upload | 7.5 | |
| Medium | CVE-2026-93326 | Crafted Git build source can bypass certain policy validation | — | |
| High | CVE-2026-15791 | LLB file operation can be tricked to remove /tmp directory contents | 7.5 | |
| High | CVE-2026-15792 | Possible panic when incorrect parameters sent from frontend | 7.5 | |
| Medium | CVE-2026-93320 | BuildKit improperly handles special files in build snapshots | — | |
| Medium | CVE-2026-93317 | Container blob cache can accept unverified content | — | |
| High | CVE-2026-15793 | Git source checkout from a bundle file could lead to command injection | 7.5 | |
| Medium | CVE-2026-93315 | BuildKit proxy CA cleanup can be disrupted by build steps | — | |
| Medium | CVE-2026-93319 | A malicious frontend can cause a daemon panic | — | |
| Medium | CVE-2026-61711 | BuildKit: Custom frontend could bypass Seccomp/AppArmor | — | |
| Low | CVE-2026-61712 | BuildKit: Possible runtime DoS via unbounded group parsing | — |