Medium severityNVD Advisory· Published Oct 5, 2026

CVE-2026-93315

Description

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build.

Patches

Vulnerability mechanics

References

github.com/moby/buildkit/releases/tag/v0.33.1nvd
github.com/moby/buildkit/security/advisories/GHSA-2f5p-x9ph-g97xnvd

News mentions

No linked articles in our index yet.