Skip to content
Fencer Vulns
high 7.2

CVE-2026-75593 json

BuildKit: Malicious client can bypass destination directory validation on local sources upload

published 2026-08-19 2 mo ago modified 2026-09-09 1 mo ago also EUVD-2026-62839

cvss
7.2
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 45%
public exploits
0
none known

Summary

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.

Patch / fix

  • trivy hummingbird 1 0.73.0-0.1.hum1
  • podman hummingbird 1 6.0.2-2.2.hum1
  • podmansh hummingbird 1 6.0.2-2.2.hum1
  • podman-docker hummingbird 1 6.0.2-2.2.hum1
  • podman-remote hummingbird 1 6.0.2-2.2.hum1
  • podman-machine hummingbird 1 6.0.2-2.2.hum1
  • buildah hummingbird 1 1.45.0-2.hum1

red hat advisories RHSA-2026:50953RHSA-2026:52807RHSA-2026:51065

  • moby-engine Azure Linux 3.0 25.0.3-20

azure linux advisories AZL-97035

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-75593 updated cvss 6.5

github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification

  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 rhai/assisted-installer-controller-rhel9 Red Hat Compliance Operator compliance/openshift-compliance-must-gather-rhel8 Red Hat Kernel Module Management Operator for Red Hat Openshift kmm/kernel-module-management-must-gather-rhel9 Red Hat Migration Toolkit for Containers rhmtc/openshift-migration-log-reader-rhel8, rhmtc/openshift-migration-must-gather-rhel8
    affected: workaround, no fix available
  • Red Hat Migration Toolkit for Virtualization migration-toolkit-virtualization/mtv-must-gather-rhel8, migration-toolkit-virtualization/mtv-must-gather-rhel9
    affected: workaround, no fix available “Fix deferred”
  • Red Hat Multicluster Engine for Kubernetes multicluster-engine/assisted-service-8-rhel8, multicluster-engine/assisted-service-9-rhel9, multicluster-engine/assisted-installer-controller-rhel8, multicluster-engine/assisted-installer-controller-rhel9 Red Hat Node HealthCheck Operator workload-availability/node-healthcheck-must-gather-rhel8, workload-availability/node-healthcheck-must-gather-rhel9
    affected: workaround, no fix available
  • Red Hat OpenShift Developer Tools and Services ocp-tools-4/jenkins-rhel8, ocp-tools-4/jenkins-rhel9, ocp-tools-4/jenkins-agent-base-rhel8, ocp-tools-4/jenkins-agent-base-rhel9
    affected: workaround, no fix available “Fix deferred”
  • Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-agentic-sandbox-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenShift Serverless openshift-serverless-1/kn-client-kn-rhel9, openshift-serverless-clients 1.17.0-4.el9, openshift-serverless-1/serverless-must-gather-rhel9, openshift-serverless-1/kn-plugin-func-func-util-rhel9 Red Hat OpenShift Service Mesh 3 openshift-service-mesh/istio-cni-rhel9, openshift-service-mesh/istio-pilot-rhel9 Red Hat Power monitoring for Red Hat OpenShift openshift-power-monitoring/power-monitoring-rhel9-operator
    affected: workaround, no fix available
  • Red Hat Ansible Automation Platform 2 ansible-automation-platform-25/ee-supported-rhel8, ansible-automation-platform-25/ee-supported-rhel9, ansible-automation-platform-26/ee-supported-rhel9, ansible-automation-platform-27/ee-supported-rhel9, ansible-automation-platform-24/aap-must-gather-rhel8, ansible-automation-platform-25/aap-must-gather-rhel8, +2 more
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat Build of Podman Desktop rh-podman-desktop.git 1.1.0 Red Hat Ceph Storage 9 rhceph/alloy-rhel10 Red Hat Certification Program for Red Hat Enterprise Linux 9 rhcertification/redhat-certification-baremetal, rhcertification/redhat-certification-system-ai-10
    affected: workaround, no fix available
show 16 more
  • Red Hat Developer Hub 1 rhdh/rhdh-must-gather-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Enterprise Linux 9 ubi9/buildah Red Hat Enterprise Linux 10 ubi10/podman, ubi10/buildah, rhel10/rhel-bootc, rhel10-eus/rhel-10.0-bootc, rhel10-eus/rhel-10.2-bootc, rhel10/bootc-image-builder Red Hat OpenShift AI (RHOAI) rhoai/odh-ai-gateway-payload-processing-e2e-rhel9
    affected: workaround, no fix available
  • Red Hat OpenShift Container Platform 4 openshift-kni/commatrix, openshift4/cnf-tests-rhel8, openshift4/kube-compare-artifacts-rhel9, openshift4/ose-secrets-store-csi-mustgather-rhel8, openshift4/ose-secrets-store-csi-mustgather-rhel9
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat OpenShift Container Platform 5 openshift-clients, openshift-kni/commatrix, openshift5/ose-cli-rhel9, openshift5/ose-tools-rhel9, openshift5/ose-deployer-rhel9, openshift5/ose-must-gather-rhel9, +5 more Red Hat Openshift Data Foundation 4 odf4/odf-must-gather-rhel9
    affected: workaround, no fix available
  • Red Hat OpenShift GitOps openshift-gitops-1/must-gather-rhel8, openshift-gitops-1/must-gather-rhel9
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat OpenStack Platform 18.0 rhoso-operators/openstack-must-gather-rhel9, rhoso-operators/prometheus-podman-exporter-rhel9 Red Hat Quay 3 quay/quay-builder-rhel8, quay/quay-builder-rhel9 Red Hat Trusted Artifact Signer rhtas/ec-rhel9 Red Hat Web Terminal web-terminal/web-terminal-tooling-rhel9
    affected: workaround, no fix available
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.6 openshift-logging/cluster-logging-rhel9-operator 1788439505
    fixed: vendor fix RHSA-2026:66521
  • Red Hat OpenShift API for Data Protection 1.5 oadp/oadp-mustgather-rhel9 1788859896
    fixed: vendor fix RHSA-2026:66022
  • Red Hat OpenShift Developer Tools and Services 1.6.4 source-to-image/source-to-image-rhel8 1790059956, source-to-image/source-to-image-rhel9 1790059977
    fixed: fixed in v1.6.4 RHSA-2026:69917
  • Red Hat Hardened Images buildah 1.45.0-2.hum1, podman 6.0.2-2.2.hum1, trivy 0.73.0-0.1.hum1, podmansh 6.0.2-2.2.hum1, podman-docker 6.0.2-2.2.hum1, podman-remote 6.0.2-2.2.hum1, +1 more
    fixed: vendor fix RHSA-2026:51065
  • Red Hat OpenShift AI 3.4 rhoai/odh-cli-rhel9 1791509689, rhoai/rhai-cli-rhel9 1791509689, rhoai/odh-must-gather-rhel9 1791351741, rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 1791829069, rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 1791829182, rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 1791868244, +9 more
    fixed: vendor fix RHSA-2026:84734
  • Red Hat Quay 3.16 quay/quay-rhel9 1789563753
    fixed: vendor fix RHSA-2026:69255
  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 assisted/agent-preinstall-image-builder-rhel9
    not affected: vulnerable code not present
  • Red Hat Confidential Compute Attestation build-of-trustee/trustee-must-gather-rhel9, openshift-sandboxed-containers/osc-must-gather-rhel9, openshift-sandboxed-containers/osc-podvm-builder-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.6 openshift-logging/vector-rhel9 1788439747, openshift-logging/eventrouter-rhel9 1788375796, openshift-logging/logging-loki-rhel9 1788156390, openshift-logging/loki-rhel9-operator 1788154255, openshift-logging/opa-openshift-rhel9 1788153362, openshift-logging/loki-operator-bundle 1788158124, +3 more Red Hat Logical Volume Manager Storage lvms4/lvms-must-gather-rhel8, lvms4/lvms-must-gather-rhel9
    not affected: vulnerable code not present
  • Red Hat Migration Toolkit for Applications 8 mta/mta-cli-rhel9, mta/mta-discovery-addon-rhel9 Red Hat Multicluster Engine for Kubernetes multicluster-engine/must-gather-rhel9
    not affected: vulnerable code not in execute path

17 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
2 mo ago

Exploit prediction

0.54% chance of exploitation in the next 30 days, higher than 45% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CNA 4.0 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • moby buildkit

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.