CVE-2026-15788

Name
CVE-2026-15788
Description
BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon process.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
security@docker.com https://github.com/moby/buildkit/security/advisories/GHSA-388v-wmr2-g2v2

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:* buildkit >= None < 0.31.2

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
buildkit edge-community 0.32.2-r0 Hoang Nguyen <folliekazetani@protonmail.com> fixed
buildkit edge-community 0.29.0-r2 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.29.0-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.29.0-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.27.0-r3 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.27.0-r2 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.27.0-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.27.0-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.25.1-r2 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.25.1-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.25.1-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.24.0-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.24.0-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.23.2-r3 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.23.2-r2 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.23.2-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.23.2-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.21.1-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.20.1-r2 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.20.1-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.20.1-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.19.0-r2 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.19.0-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.19.0-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.18.2-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.18.2-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.18.1-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.18.0-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit edge-community 0.12.5-r0 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit 3.24-community 0.29.0-r2 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable
buildkit 3.24-community 0.29.0-r1 Hoang Nguyen <folliekazetani@protonmail.com> possibly vulnerable