Database/Container, Kubernetes & orchestration
BuildKit: Crafted upload request lets files escape the BuildKit state directory onto the host
CVE-2026-15789Container, Kubernetes & orchestrationcurated
Impact
Crafted upload request lets files escape the BuildKit state directory onto the host
Who can reach it
Anyone with build control API access
What to do
Upgrade BuildKit
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.