CVE-2026-75593CWE-22path-traversal

CVE-2026-75593

published August 20, 2026

CVSS
7.2
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.

The record
Technical detail
CVSS
7.2 · NONE
CVSS v4.0
7.2 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-20T00:17Z
References (2)
https://github.com/moby/buildkit/releases/tag/v0.31.2 · [email protected]https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976 · [email protected]
EPSS history
Timeline
  • 19 AUG 20:06Z
    BuildKit: Malicious client can bypass destination directory validation on local sources upload
    cvelistv5