CVE-2026-93315

UNKNOWN

Description

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build.

Timeline

Published:October 5th, 2026 10:16 PM

Last modified:October 5th, 2026 10:16 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-367

References & Reports

Advisories, patches, and third-party reports

https://github.com/moby/buildkit/releases/tag/v0.33.1
https://github.com/moby/buildkit/security/advisories/GHSA-2f5p-x9ph-g97x

Source: NIST NVD · Data may lag official sources by up to one minute