CVEvulnerability

CVE-2026-93320

6.0 MEDIUM Published 2026-10-05 Modified 2026-10-06 Official page ↗
Status
Awaiting Analysis
Published
2026-10-05
Last modified
2026-10-06
Assigner
[email protected]
CVSS 4.0 ([email protected])
6.0 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-441

Description

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.

Related

Weakness · CWE (1)

  • CWE-441 Unintended Proxy or Intermediary weakness

References