The vulnerability of the BuildKit container-building software lies in the improper limitation of the path name to the restricted-access directory, which allows a malicious actor to delete arbitrary files outside of the container.

The vulnerability of the BuildKit container-building software relates to incorrect pathname restrictions for access to restricted directories. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files outside of the container...