BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.
CVSS Details
- CVSS 3.1 Base Score: 8.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade singularityUpgrade buildkitUpgrade dockerUpgrade podman | Aug 22, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade dockerUpgrade docker-debugsourceUpgrade docker-debuginfo | Feb 17, 2025 | Jan 31, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade app-containers/podman.Upgrade app-containers/docker.Upgrade app-containers/buildah. | Jul 9, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade docker-stable-fish-completionUpgrade docker-stableUpgrade docker-zsh-completionUpgrade buildkitUpgrade docker-fish-completionUpgrade docker-bash-completionUpgrade docker-buildxUpgrade docker-rootless-extrasUpgrade dockerUpgrade docker-stable-bash-completionUpgrade buildahUpgrade docker-stable-zsh-completionUpgrade docker-stable-rootless-extras | Feb 23, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade golang-github-docker-docker-dev (Ubuntu Pro)Upgrade docker.io (Ubuntu Pro) | May 2, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub