BuildKit may be tricked into performing file actions with special file inodes where regular files are expected.
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Docker
- Product
- Docker Desktop / Engine
- Exposure class
- Developer platform
Why it ranks 5 (Routine)
- Product class: developer platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-93320 on this site · NVD · CVE.org · Vulnpedia