PT-2026-28525 · Buildkit+3 · Buildkit+3

1Seal · Published 2026-03-26 · Updated 2026-05-18 · CVE-2026-33747

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.28.1

Description BuildKit is a toolkit for converting source code to build artifacts. When using a custom BuildKit frontend, a malicious frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context. This issue requires using an untrusted BuildKit frontend set with #syntax or --build-arg BUILDKIT SYNTAX. Using these options with a well-known frontend image like docker/dockerfile is not affected. The API message crafted by the frontend can lead to file escape outside of the storage root.

Recommendations Versions prior to 0.28.1 should be updated to version 0.28.1 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2026-07149

CLEANSTART-2026-FK40318

CVE-2026-33747

GHSA-4C29-8RGM-JVJJ

GO-2026-4858

OPENSUSE-SU-2026:10456-1

OPENSUSE-SU-2026:10472-1

OPENSUSE-SU-2026:10651-1

OPENSUSE-SU-2026:20702-1

OPENSUSE-SU-2026:20809-1

OPENSUSE-SU-2026:20814-1

SUSE-SU-2026:1205-1

SUSE-SU-2026:2120-1

SUSE-SU-2026:21851-1

USN-8230-1

Affected Products

Buildkit

Linuxmint

Red Os

Ubuntu

References · 102

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33747.json · Exploit
• https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32280 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10651-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34040 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39883 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33747 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10472-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27144 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27143 · Security Note
• https://bdu.fstec.ru/vul/2026-07149 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32282 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33747 · Security Note
• https://osv.dev/vulnerability/GHSA-4c29-8rgm-jvjj · Vendor Advisory