Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2026-93319

A malicious frontend can cause a daemon panic

Description

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moby BuildKit

Default version status: unaffected

  • 0 to ≤ 0.33.0affected

References