GO-2026-6255

BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

At a glance

Published: 2026-08-25 15:00 UTC
Updated: 2026-09-01 21:56 UTC
CVE: CVE-2026-61711
Aliases: GHSA-7236-3392-c5c6

Description

BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

Affected packages

Package	Versions
Go · github.com/moby/buildkit	introduced 0, fixed 0.31.1

References

https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6 ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database