CVE-2026-61711

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.31.1

Description BuildKit is a toolkit used to convert source code into build artifacts. A custom frontend can send a crafted build request containing an invalid SecurityMode value. The executor/oci/spec linux.go file treats this unsupported value as a non-sandbox mode without requiring the security.insecure entitlement. This results in the disabling of Seccomp (a Linux kernel feature that restricts the system calls a process can make) and AppArmor (a mandatory access control system) protections for the build container, although Linux capabilities remain restricted.

Recommendations Update BuildKit to version 0.31.1.