MEDIUM 6.7 NVD

CVE-2026-121522

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

References

https://github.com/moby/buildkit/security/advisories/GHSA-2fqp-xg6f-v7gj

Published: 2026-11-03 · Source: NVD · Feed updated: 2026-11-04

This medium severity vulnerability with a CVSS score of 6.7 was published on 2026-11-03 via NVD.

vulnfeed aggregates 18613 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.