CVE-2024-23652

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.12.5

Description A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue is related to incorrect restriction of the path name to a directory with limited access, which may allow a remote attacker to delete arbitrary files outside the container.

Recommendations For versions prior to 0.12.5, update to version 0.12.5 to resolve the issue. As a temporary workaround, consider avoiding the use of BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing the RUN --mount feature.