CVE-2026-93322 Malformed MergeOp can crash the BuildKit daemon

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93322 Malformed MergeOp can crash the BuildKit daemon

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...

CVE-2026-93322

The buildkitd daemon is vulnerable to a Denial of Service (DoS) condition where a malicious frontend can submit a malformed LLB definition (specifically involving a malformed MergeOp ). This input causes the daemon to panic and terminate , which interrupts all active builds running on that daemon...