Vulnerability details
CVE-2026-75593
moby BuildKit
BuildKit: Malicious client can bypass destination directory validation on local sources upload
CVSS 4.0
7.2High
Official description
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.2High | 4.0 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| moby | BuildKit | < 0.31.2 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976 x_refsource_CONFIRM
- https://github.com/moby/buildkit/releases/tag/v0.31.2 x_refsource_MISC
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-19
- Last updated
- 2026-08-25
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.54%
Probability of exploitation in 30 days
45.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')