Skip to content
Fencer Vulns
high 7.5

CVE-2026-15792 json

Possible panic when incorrect parameters sent from frontend

published 2026-07-21 3 mo ago modified 2026-10-24 15 d ago also EUVD-2026-46311

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 15%
public exploits
0
none known

Summary

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

Patch / fix

  • moby BuildKit 0.31.2
  • trivy hummingbird 1 0.72.0-0.1.2.hum1
  • podman hummingbird 1 6.0.2-2.1.hum1
  • podmansh hummingbird 1 6.0.2-2.1.hum1
  • podman-tests hummingbird 1 6.0.2-2.1.hum1
  • podman-docker hummingbird 1 6.0.2-2.1.hum1
  • podman-remote hummingbird 1 6.0.2-2.1.hum1
  • podman-machine hummingbird 1 6.0.2-2.1.hum1
  • buildah hummingbird 1 1.44.0-3.2.hum1

red hat advisories RHSA-2026:46988RHSA-2026:44152RHSA-2026:43122

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-15792 updated cvss 6.5

github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request

  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 rhai/assisted-installer-controller-rhel9 Red Hat Compliance Operator compliance/openshift-compliance-must-gather-rhel8 Red Hat Kernel Module Management Operator for Red Hat Openshift kmm/kernel-module-management-must-gather-rhel9 Red Hat Migration Toolkit for Containers rhmtc/openshift-migration-log-reader-rhel8, rhmtc/openshift-migration-must-gather-rhel8 Red Hat Multicluster Engine for Kubernetes multicluster-engine/assisted-service-8-rhel8, multicluster-engine/assisted-service-9-rhel9, multicluster-engine/assisted-installer-controller-rhel8, multicluster-engine/assisted-installer-controller-rhel9 Red Hat Node HealthCheck Operator workload-availability/node-healthcheck-must-gather-rhel8, workload-availability/node-healthcheck-must-gather-rhel9
    affected: workaround, no fix available
  • Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-agentic-sandbox-rhel9 Red Hat OpenShift Serverless openshift-serverless-1/kn-client-kn-rhel9, openshift-serverless-1/serverless-must-gather-rhel9, openshift-serverless-1/kn-plugin-func-func-util-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Power monitoring for Red Hat OpenShift openshift-power-monitoring/power-monitoring-rhel9-operator
    affected: workaround, no fix available
  • Red Hat Ansible Automation Platform 2 ansible-automation-platform-25/ee-supported-rhel8, ansible-automation-platform-25/ee-supported-rhel9, ansible-automation-platform-26/ee-supported-rhel9, ansible-automation-platform-27/ee-supported-rhel9, ansible-automation-platform-24/aap-must-gather-rhel8, ansible-automation-platform-25/aap-must-gather-rhel8, +2 more
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat Ceph Storage 9 rhceph/alloy-rhel10
    affected: workaround, no fix available “Fix deferred”
  • Red Hat Certification Program for Red Hat Enterprise Linux 9 rhcertification/redhat-certification-baremetal, rhcertification/redhat-certification-system-ai-10
    affected: workaround, no fix available
  • Red Hat OpenShift Container Platform 4 openshift-kni/commatrix, openshift4/cnf-tests-rhel8, openshift4/microshift-bootc-rhel9, openshift4/microshift-bootc-rhel10, openshift4/ose-machine-config-rhel9-operator, openshift4/ose-secrets-store-csi-mustgather-rhel8, +2 more
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat OpenShift Container Platform 5 openshift-kni/commatrix, openshift5/ose-cli-rhel9, openshift5/ose-tools-rhel9, openshift5/ose-deployer-rhel9, openshift5/ose-must-gather-rhel9, openshift5/ose-cli-artifacts-rhel9, +4 more Red Hat Openshift Data Foundation 4 odf4/odf-must-gather-rhel9 Red Hat OpenStack Platform 18.0 rhoso-operators/prometheus-podman-exporter-rhel9 Red Hat Quay 3 quay/quay-builder-rhel8 Red Hat Trusted Artifact Signer rhtas/ec-rhel9 Red Hat Web Terminal web-terminal/web-terminal-tooling-rhel9
    affected: workaround, no fix available
show 18 more
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.2 openshift-logging/cluster-logging-rhel9-operator 1789050399
    fixed: vendor fix RHSA-2026:68349
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.6 openshift-logging/cluster-logging-rhel9-operator 1788439505
    fixed: vendor fix RHSA-2026:66521
  • Red Hat OpenShift API for Data Protection 1.5 oadp/oadp-mustgather-rhel9 1788859896
    fixed: vendor fix RHSA-2026:66022
  • Red Hat Hardened Images podman 6.0.2-2.1.hum1, buildah 1.44.0-3.2.hum1, podmansh 6.0.2-2.1.hum1, trivy 0.72.0-0.1.2.hum1, podman-tests 6.0.2-2.1.hum1, podman-docker 6.0.2-2.1.hum1, +3 more
    fixed: vendor fix RHSA-2026:43122
  • Red Hat OpenShift AI 3.4 rhoai/odh-cli-rhel9 1791509689, rhoai/rhai-cli-rhel9 1791509689, rhoai/odh-must-gather-rhel9 1791351741, rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 1791829069, rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 1791829182, rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 1791868244, +9 more
    fixed: vendor fix RHSA-2026:84734
  • Red Hat Quay 3.9 quay/quay-rhel8 1788595574
    fixed: vendor fix RHSA-2026:65514
  • Red Hat Quay 3.10 quay/quay-rhel8 1788561841
    fixed: vendor fix RHSA-2026:66084
  • Red Hat Quay 3.12 quay/quay-rhel8 1788594376
    fixed: vendor fix RHSA-2026:66523
  • Red Hat Quay 3.14 quay/quay-rhel8 1788593843
    fixed: vendor fix RHSA-2026:70267
  • Red Hat Quay 3.16 quay/quay-rhel9 1789563753
    fixed: vendor fix RHSA-2026:69255
  • Red Hat Quay 3.17 quay/quay-rhel9 1790690298
    fixed: vendor fix RHSA-2026:74511
  • Red Hat Quay 3.18 quay/quay-builder-rhel9 1791305715
    fixed: vendor fix RHSA-2026:81110
  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 assisted/agent-preinstall-image-builder-rhel9 Red Hat Confidential Compute Attestation build-of-trustee/trustee-must-gather-rhel9, openshift-sandboxed-containers/osc-must-gather-rhel9, openshift-sandboxed-containers/osc-podvm-builder-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.2 openshift-logging/vector-rhel9 1789050538, openshift-logging/eventrouter-rhel9 1789050399, openshift-logging/logging-loki-rhel9 1789050556, openshift-logging/loki-rhel9-operator 1789050212, openshift-logging/opa-openshift-rhel9 1789050227, openshift-logging/loki-operator-bundle 1789053077, +3 more Red Hat Logging Subsystem for Red Hat OpenShift 6.6 openshift-logging/vector-rhel9 1788439747, openshift-logging/eventrouter-rhel9 1788375796, openshift-logging/logging-loki-rhel9 1788156390, openshift-logging/loki-rhel9-operator 1788154255, openshift-logging/opa-openshift-rhel9 1788153362, openshift-logging/loki-operator-bundle 1788158124, +3 more Red Hat Logical Volume Manager Storage lvms4/lvms-must-gather-rhel8, lvms4/lvms-must-gather-rhel9
    not affected: vulnerable code not present
  • Red Hat Migration Toolkit for Applications 8 mta/mta-cli-rhel9, mta/mta-discovery-addon-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat Migration Toolkit for Virtualization migration-toolkit-virtualization/mtv-must-gather-rhel8, migration-toolkit-virtualization/mtv-must-gather-rhel9
    not affected: vulnerable code not present
  • Red Hat Multicluster Engine for Kubernetes multicluster-engine/must-gather-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat OpenShift API for Data Protection 1.5 oadp/oadp-velero-rhel9 1788860461, oadp/oadp-rhel9-operator 1788901633, oadp/oadp-non-admin-rhel9 1788863730, oadp/oadp-operator-bundle 1788902327, oadp/oadp-cli-binaries-rhel9 1788860076, oadp/oadp-velero-plugin-rhel9 1788859276, +6 more
    not affected: vulnerable code not present

27 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
3 mo ago

Exploit prediction

0.24% chance of exploitation in the next 30 days, higher than 15% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CNA 4.0 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • moby BuildKit

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.