CVE-2026-93320: BuildKit improperly handles special files in build snapshots
Published Oct 5, 2026
·Updated
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.
Affected Software
1 affected component
Moby BuildKit
Event History
Oct 5, 2026
CVE Published
via MITRE·05:50 PM
Data Sourced
via MITRE·05:50 PM
DescriptionWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
When can this issue lead to host device access rather than only blocked build operations?
Unintended host device access is described only for rootful workers. In other affected cases, special files may block file operations.
2
Which BuildKit release is identified in the provided references?
The references include the BuildKit v0.33.1 release.