CVE-2026-121522

BuildKit versions v0.26.0 through v0.34.1 are vulnerable to a NULL Pointer Dereference (CWE-476) that causes the BuildKit daemon to panic and crash . This occurs when a specific build definition attempts to resolve metadata for the same Git source reference twice. The crash results in the interru...