What’s Vulnerable › Vulnerabilities

CVE-2026-93320: BuildKit improperly handles special files in build snapshots

• Severity: medium (CVSS 6.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-05 · updated 2026-10-06
• Weakness: CWE-441

Description

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.

Affected products

• moby BuildKit: through 0.33.0

References

• https://github.com/moby/buildkit/releases/tag/v0.33.1
• https://github.com/moby/buildkit/security/advisories/GHSA-9728-qjrv-2xh2

Get alerted when CVE-2026-93320 or the next vulnerability affects your stack