Vulnpedia
← Search CVEs

CVE-2026-93320

MEDIUM 6

Published 2026-10-05 · Last modified 2026-10-05

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.1%chance of exploitation in 30 days · 1st percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

6CVSS 4.0 · MEDIUM

  • ConfidentialityNone
  • IntegrityLow
  • AvailabilityLow

What an attacker needs

  • ⚠Access: Requires local access to the host
  • ✓Privileges: No account or privileges required
  • ⚠User interaction: Requires active user interaction
  • ✓Complexity: No special conditions — reliably repeatable
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Moby

Products Buildkit

Weakness (CWE)

  • CWE-441: : Unintended Proxy or Intermediary ('Confused Deputy')

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H

References and research data (JSON)

Vendor product assessments

  • buildah.src as a component of Red Hat Hardened Images · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]?arch=src

    Red Hat · CVE-2026-93320 · Updated 2026-10-20T18:54:58+00:00
  • podman.src as a component of Red Hat Hardened Images · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]?arch=src

    Red Hat · CVE-2026-93320 · Updated 2026-10-20T18:54:58+00:00
  • trivy.src as a component of Red Hat Hardened Images · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]?arch=src

    Red Hat · CVE-2026-93320 · Updated 2026-10-20T18:54:58+00:00
  • quay/quay-builder-rhel8 as a component of Red Hat Quay 3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:oci/quay-builder-rhel8?repository_url=registry.redhat.io/quay/quay-builder-rhel8

    Red Hat · CVE-2026-93320 · Updated 2026-10-20T18:54:58+00:00
  • quay/quay-builder-rhel9 as a component of Red Hat Quay 3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:oci/quay-builder-rhel9?repository_url=registry.redhat.io/quay/quay-builder-rhel9

    Red Hat · CVE-2026-93320 · Updated 2026-10-20T18:54:58+00:00

All CVSS metrics

  • MEDIUM 6 v4.0 · CNA Primary
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H
  • MEDIUM 6 v4.0 · NVD Secondary
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · EPSS