CVE-2026-93322
Docker: malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon
CVE-2026-93322: Docker: malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that…
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
CVE-2026-93322 at a glance
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- Medium
- CVSS base score
- 6.9 (Docker), 6.2 (Red Hat)
- Weakness
- CWE-248
- Fixed releases
- Red Hat: 0.33.1
- VulniPulse record
- Published · Updated
Scores, vectors, weaknesses and fixed releases are quoted from vendor advisories that cover only CVE-2026-93322; bulletin-wide values are not repeated here.
Is CVE-2026-93322 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2026-93322 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2026-93322?
Upgrade to a fixed release named by the vendor:
- Red Hat: 0.33.1
Vendor advisory comparison
Docker
1 advisory- Advisory severityMedium6.9
Medium [CVE-2026-93322] Docker: malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon
CVE-2026-93322Source published Source updated
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. Affected product named by the advisory: Docker.
- Affected products in this advisory
- BuildKit
- Source-reported affected versions
- BuildKit through 0.33.0
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Red Hat
1 advisory- Advisory severityMedium6.2
Medium [CVE-2026-93322] Denial of Service via crafted LLB definition
CVE-2026-93322Source published Source updated
Denial of Service via crafted LLB definition. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-248.
- Related products — impact not confirmed
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- 0.33.1
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.