github.com/moby/buildkit: BuildKit: Privilege escalation via unauthorized extended file attribute modification

A flaw was found in BuildKit. A client with access to the BuildKit control application programming interface API can submit a specially crafted build request to set extended attributes—additional metadata stored with files—on files located outside the BuildKit state directory. Manipulating these...