{"id":"CVE-2026-93319","published":"2026-10-05T18:17:38.217","lastModified":"2026-10-06T15:08:38.397","description":"A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-567"],"vendors":[],"products":[],"references":[{"url":"https://github.com/moby/buildkit/releases/tag/v0.33.1","tags":[]},{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8","tags":[]}],"exploitRefs":[{"url":"https://github.com/moby/buildkit/releases/tag/v0.33.1","tags":[]},{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8","tags":[]}],"hasPoc":true,"ai":null}