{"id":"CVE-2026-93315","published":"2026-10-05T22:16:58.820","lastModified":"2026-10-06T15:08:38.397","description":"When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-367"],"vendors":[],"products":[],"references":[{"url":"https://github.com/moby/buildkit/releases/tag/v0.33.1","tags":[]},{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-2f5p-x9ph-g97x","tags":[]}],"exploitRefs":[{"url":"https://github.com/moby/buildkit/releases/tag/v0.33.1","tags":[]},{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-2f5p-x9ph-g97x","tags":[]}],"hasPoc":true,"ai":null}