CVE record · 1 source
CVE-2026-93318
A malicious image can advertise DiffIDs from another image while containing different layer contents.
- Vendor
- Docker
- Product
- Docker Desktop / Engine
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A malicious image can advertise DiffIDs from another image while containing different layer contents.
A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot identity without validating that…