CVE-2026-121520

A flaw was found in BuildKit. A client with access to the BuildKit control application programming interface API can submit a specially crafted build request to set extended attributes—additional metadata stored with files—on files located outside the BuildKit state directory. Manipulating these...