CVE-2026-93321

Received Received - Intake

Buildkitd Denial of Service via Malicious LLB Definition

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: Docker Inc.

Description

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-05

Generated

2026-10-06

AI Q&A

2026-10-06

EPSS Evaluated

N/A

NVD

CVE-2026-93321

Affected Vendors & Products

Vendor	Product	Version / Range
moby	BuildKit	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-129	The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Attack-Flow Graph

Executive Summary

A malicious frontend can submit a specially crafted LLB definition to BuildKit, causing the buildkitd service to crash and terminate. This interrupts all ongoing builds on the affected daemon.

Detection Guidance

This vulnerability may cause buildkitd to panic and terminate unexpectedly. Monitor buildkitd logs for crashes or panics. Check for interrupted builds or daemon restarts. No specific detection commands are provided in the context.

Impact Analysis

If exploited, this vulnerability can disrupt all build processes running on a compromised buildkitd daemon, leading to service interruptions and potential loss of work in progress.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it pertains to build interruption rather than data exposure or privacy violations. However, service disruption could indirectly impact operational compliance if builds are interrupted during critical processing.

Mitigation Strategies

Update BuildKit to the latest patched version to prevent the panic condition. Restart buildkitd to apply changes. Monitor running builds for interruptions.

Hi! I’m here to help you understand CVE-2026-93321. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70