CVE-2026-93320

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-93320

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93320.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-93320

Aliases

GHSA-9728-qjrv-2xh2

Downstream

UBUNTU-CVE-2026-93320

Published

2026-10-05T17:50:44Z

Modified

2026-10-06T10:30:40Z

Severity

6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H CVSS Calculator

Summary

BuildKit improperly handles special files in build snapshots

Details

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.

Database specific

{
    "cna_assigner":  "Docker",
    "cwe_ids":  [
        "CWE-441"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93320.json"
}

References

Affected packages

Git / github.com/moby/buildkit

Affected ranges

Type

GIT

Repo

https://github.com/moby/buildkit

Events

Introduced

Last Affected

dddd5621af04ea57823085c93a063383f71d3173

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "0.33.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

dockerfile/0.*

dockerfile/0.9.0

dockerfile/0.9.0-experimental

dockerfile/1.*

dockerfile/1.0.0

dockerfile/1.0.0-experimental

dockerfile/1.0.1

dockerfile/1.0.1-experimental

dockerfile/1.0.2-experimental

dockerfile/1.1.0

dockerfile/1.1.0-experimental

dockerfile/1.1.1

dockerfile/1.1.1-experimental

dockerfile/1.1.2

dockerfile/1.1.2-experimental

dockerfile/1.1.3

dockerfile/1.1.3-experimental

dockerfile/1.1.6

dockerfile/1.1.6-experimental

dockerfile/1.1.6-rc1

dockerfile/1.1.6-rc1-experimental

dockerfile/1.10.0-rc1

dockerfile/1.10.0-rc1-labs

dockerfile/1.11.0

dockerfile/1.11.0-labs

dockerfile/1.11.0-rc1

dockerfile/1.11.0-rc1-labs

dockerfile/1.11.0-rc2

dockerfile/1.11.0-rc2-labs

dockerfile/1.12.0

dockerfile/1.12.0-labs

dockerfile/1.12.0-rc1

dockerfile/1.12.0-rc1-labs

dockerfile/1.13.0-rc1

dockerfile/1.13.0-rc1-labs

dockerfile/1.14.0-rc1

dockerfile/1.14.0-rc1-labs

dockerfile/1.14.0-rc2

dockerfile/1.14.0-rc2-labs

dockerfile/1.15.0-rc1

dockerfile/1.15.0-rc1-labs

dockerfile/1.16.0-rc1

dockerfile/1.16.0-rc1-labs

dockerfile/1.17.0-rc1

dockerfile/1.17.0-rc1-labs

dockerfile/1.18.0-rc1

dockerfile/1.18.0-rc1-labs

dockerfile/1.18.0-rc2

dockerfile/1.18.0-rc2-labs

dockerfile/1.19.0-rc1

dockerfile/1.19.0-rc1-labs

dockerfile/1.2.0

dockerfile/1.2.0-labs

dockerfile/1.2.0-rc1

dockerfile/1.2.0-rc1-labs

dockerfile/1.2.1

dockerfile/1.2.1-labs

dockerfile/1.20.0

dockerfile/1.20.0-labs

dockerfile/1.20.0-rc1

dockerfile/1.20.0-rc1-labs

dockerfile/1.21.0-rc1

dockerfile/1.21.0-rc1-labs

dockerfile/1.22.0-rc1

dockerfile/1.22.0-rc1-labs

dockerfile/1.22.0-rc2

dockerfile/1.22.0-rc2-labs

dockerfile/1.23.0

dockerfile/1.23.0-labs

dockerfile/1.23.0-rc1

dockerfile/1.23.0-rc1-labs

dockerfile/1.24.0-rc1

dockerfile/1.24.0-rc1-labs

dockerfile/1.25.0

dockerfile/1.25.0-labs

dockerfile/1.25.0-rc1

dockerfile/1.25.0-rc1-labs

dockerfile/1.25.0-rc2

dockerfile/1.25.0-rc2-labs

dockerfile/1.26.0

dockerfile/1.26.0-labs

dockerfile/1.26.0-rc2

dockerfile/1.26.0-rc2-labs

dockerfile/1.27.0

dockerfile/1.27.0-labs

dockerfile/1.27.0-rc1

dockerfile/1.27.0-rc1-labs

dockerfile/1.3.0

dockerfile/1.3.0-labs

dockerfile/1.3.0-rc1

dockerfile/1.3.0-rc1-labs

dockerfile/1.4.0

dockerfile/1.4.0-labs

dockerfile/1.4.0-labs-rc1

dockerfile/1.4.0-labs-rc2

dockerfile/1.4.0-rc1

dockerfile/1.4.0-rc2

dockerfile/1.5.0-rc1

dockerfile/1.5.0-rc1-labs

dockerfile/1.5.0-rc2

dockerfile/1.5.0-rc2-labs

dockerfile/1.6.0

dockerfile/1.6.0-labs

dockerfile/1.6.0-rc1

dockerfile/1.6.0-rc1-labs

dockerfile/1.6.0-rc2

dockerfile/1.6.0-rc2-labs

dockerfile/1.7.0-rc1

dockerfile/1.7.0-rc1-labs

dockerfile/1.8.0

dockerfile/1.8.0-labs

dockerfile/1.8.0-rc1

dockerfile/1.8.0-rc1-labs

dockerfile/1.8.0-rc2

dockerfile/1.8.0-rc2-labs

dockerfile/1.9.0

dockerfile/1.9.0-labs

dockerfile/1.9.0-rc1

dockerfile/1.9.0-rc1-labs

dockerfile/1.9.0-rc2

dockerfile/1.9.0-rc2-labs

v0.*

v0.10.0

v0.10.0-rc1

v0.10.0-rc2

v0.11.0-rc1

v0.11.0-rc2

v0.11.0-rc3

v0.12.0

v0.12.0-rc1

v0.12.0-rc2

v0.13.0-beta1

v0.13.0-beta2

v0.13.0-beta3

v0.13.0-rc1

v0.13.0-rc2

v0.13.0-rc3

v0.14.0

v0.14.0-rc1

v0.14.0-rc2

v0.15.0

v0.15.0-rc1

v0.15.0-rc2

v0.16.0-rc1

v0.16.0-rc2

v0.17.0

v0.17.0-rc1

v0.17.0-rc2

v0.18.0

v0.18.0-rc1

v0.18.0-rc2

v0.19.0-rc1

v0.19.0-rc2

v0.19.0-rc3

v0.20.0-rc1

v0.20.0-rc2

v0.21.0-rc1

v0.22.0-rc1

v0.23.0-rc1

v0.24.0-rc1

v0.24.0-rc2

v0.25.0-rc1

v0.26.0

v0.26.0-rc1

v0.26.0-rc2

v0.27.0-rc1

v0.27.0-rc2

v0.28.0-rc1

v0.28.0-rc2

v0.29.0

v0.29.0-rc1

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.30.0-rc1

v0.30.0-rc2

v0.31.0

v0.31.0-rc1

v0.31.0-rc2

v0.32.0

v0.32.0-rc1

v0.32.0-rc2

v0.33.0

v0.33.0-rc1

v0.33.0-rc2

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

v0.7.0-rc1

v0.8.0

v0.8.0-rc1

v0.8.0-rc2

v0.8.0-rc3

v0.8.1

v0.9.0

v0.9.0-rc1

v0.9.0-rc2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93320.json"