BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade podmanUpgrade dockerUpgrade singularityUpgrade buildkit | Aug 22, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade docker | Mar 6, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade docker-debugsourceUpgrade docker-debuginfoUpgrade docker | Feb 17, 2025 | Jan 31, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman.Upgrade app-containers/docker. | Jul 9, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade docker-stable-zsh-completionUpgrade docker-bash-completionUpgrade docker-stable-bash-completionUpgrade docker-zsh-completionUpgrade dockerUpgrade buildahUpgrade docker-stable-fish-completionUpgrade docker-stable-buildxUpgrade docker-fish-completionUpgrade docker-rootless-extrasUpgrade docker-stable-rootless-extrasUpgrade docker-stableUpgrade buildkitUpgrade docker-buildx | Feb 23, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade docker.io-appUpgrade docker.io-app (Ubuntu Pro) | Jun 3, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub