CVE-2024-23651

🗓️ 31 Jan 2024 21:49:18Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 410 Views

BuildKit v0.12.5 allows unauthorized access to host file

Reporter	Title	Published	Views	Family All 133
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	30 Sep 202416:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Concert Software is vulnerable to multiple issues	22 Aug 202417:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	28 Feb 202417:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Moby BuildKit affect IBM watsonx.data	18 Sep 202420:03	–	ibm
Tenable Nessus	Amazon Linux 2023 : docker (ALAS2023-2024-542)	6 Mar 202400:00	–	nessus
Tenable Nessus	Docker Desktop < 4.27.1 Multiple Vulnerabilities	9 Feb 202400:00	–	nessus
Tenable Nessus	GLSA-202407-12 : podman: Multiple Vulnerabilities	5 Jul 202400:00	–	nessus
Tenable Nessus	GLSA-202407-25 : Buildah: Multiple Vulnerabilities	10 Jul 202400:00	–	nessus
Tenable Nessus	GLSA-202409-29 : Docker: Multiple Vulnerabilities	28 Sep 202400:00	–	nessus
Tenable Nessus	Docker Desktop < 4.27.1 Multiple Vulnerabilities	9 Feb 202400:00	–	nessus

NVD

Vulners

Node

mobyproject buildkitRange<0.12.5

[
  {
    "vendor": "moby",
    "product": "buildkit",
    "versions": [
      {
        "version": "< 0.12.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/moby/buildkit/pull/4604
github	www.github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv
github	www.github.com/moby/buildkit/releases/tag/v0.12.5

17 Jun 2026 07:13Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.4 - 8.7

EPSS0.00791

SSVC

CWE-362