CVE-2026-15791
Vulnerability Description
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-22
Source
NVD
Vendor
moby
Product
BuildKit
Discussion (0)
Add Comment
No comments yet. Be the first!