crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory
Summary
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
What this means
In plain English
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
Recommended action
Primary action: update to a vendor-listed fixed release: 0.31.2. Vendor mitigation: A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.
Rewritten locally from the scraped official advisory data above; no generative API is used. The vendor advisory is authoritative.
- BuildKit 0.10.0 before 0.31.2
NVD record · high-confidence parse· fetched 4 hours ago·verify at source
Mitigation checklist
- A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory.
NVD record · high-confidence parse· fetched 4 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.