CVE-2026-93321 Malformed LLB file operation can crash buildkitd

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93321 Malformed LLB file operation can crash buildkitd

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93321

The buildkitd daemon is vulnerable to a crash caused by the submission of a malformed LLB definition from a malicious frontend. This issue, rooted in improper validation of an array index (CWE-129), leads to a panic that terminates the daemon and interrupts all active builds. The vulnerability is...

CVE-2026-93321 Malformed LLB file operation can crash buildkitd

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...