CVE-2026-75593
Received Received - Intake

File Escape Vulnerability in BuildKit

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: GitHub, Inc.

Description
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is fixed in version 0.31.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-20
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-75593
EUVD
EUVD-2026-62839

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
buildkit buildkit 0.31.2
moby buildkit to 0.31.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

BuildKit before 0.31.2 allows a custom client with valid permissions to craft an upload request that can cause files to escape the BuildKit-controlled state directory. This could lead to unauthorized file access or manipulation outside the intended build environment.

Impact Analysis

If exploited, this vulnerability could allow an attacker with access to BuildKit to read or modify files outside the build directory, potentially leading to data breaches, unauthorized system access, or further compromise of the build environment.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access to sensitive data, which may lead to data breaches. Organizations using BuildKit must ensure proper access controls and apply the patch to maintain compliance with standards like GDPR and HIPAA.

Mitigation Strategies

Upgrade BuildKit to version 0.31.2 or later to address the file escape vulnerability in the state directory.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75593. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart