VDB
GO-2026-4858
GO-2026-4858
PUBLISHED
BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | kaniko-fips | 0 |
| chainguard | kubescape | 0 |
| wolfi | osv-scanner | 0 |
| chainguard | cloudbeat-8.19 | 0 |
| wolfi | kubescape | 0 |
| chainguard | podman-fips-5.8 | * |
| wolfi | podman | 0 |
| chainguard | conftest | 0 |
| chainguard | kaniko | 0 |
| wolfi | trivy-operator | 0 |
| chainguard | docker-compose-fips | 0 |
| chainguard | livekit-cli | 0 |
| wolfi | trivy | 0 |
| chainguard | docker-cli-buildx | 0 |
| chainguard | docker-cli-buildx-fips | 0 |
| chainguard | buildah | 0 |
| wolfi | scorecard | 0 |
| chainguard | trivy | 0 |
| chainguard | skaffold | 0 |
| chainguard | trivy-operator-fips | 0 |
…and 29 more
Timeline
- Mar 27, 2026 CVE Published
- Mar 28, 2026 CVE Updated