PT-2026-78679

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.31.1 Description BuildKit is a toolkit used to convert source code into build artifacts. A custom frontend can send a crafted build request containing an invalid SecurityMode value. The executor/oci/spec linux.go...

Missing Entitlement Check

github.com/moby/buildkit is vulnerable to Missing Entitlement Check. The vulnerability due to improper validation of the security.insecure entitlement flag within the BuildKit APIs. An attacker can run a malicious container with elevated permissions as a result of this flaw...