CVE-2026-93320

— UNSCOREDpublic exploit available

Published 2026-10-05 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.

Weaknesses

CWE-441

Public exploit & PoC references

https://github.com/moby/buildkit/releases/tag/v0.33.1
https://github.com/moby/buildkit/security/advisories/GHSA-9728-qjrv-2xh2

All references

https://github.com/moby/buildkit/releases/tag/v0.33.1
https://github.com/moby/buildkit/security/advisories/GHSA-9728-qjrv-2xh2

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100625PoC
CRITICALCVE-2026-100706PoC
UNSCOREDCVE-2026-101897PoC
UNSCOREDCVE-2026-101905PoC
UNSCOREDCVE-2026-101907PoC
CRITICALCVE-2026-102255
CRITICALCVE-2026-103922PoC
HIGHCVE-2026-106188

Related by shared AI tags and CWE weakness class. Browse the full archive.