Priority LOW 28
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
Vulnerabilities
3 records
Priority LOW 16
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.
TI-2026-13283 CVE-2026-15789
Malicious client can bypass destination directory validation on local sources upload
Priority LOW 30
A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory.