PT-2026-136698

CVE-2026-121522

·

Published

2026-11-03

·

Updated

2026-11-03

Description by

CVSS 4.0
6.7
Medium
MetricsAV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-476: NULL Pointer Dereference
Related identifiers
CVE-2026-121522
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com