CyberRota Analysis
AI-GeneratedA vulnerability exists in the BuildKit daemon that allows a custom client with valid permissions to craft an upload request, enabling files to escape from the controlled state directory. This could lead to unauthorized access to sensitive files and potential system compromise. Organizations utilizing BuildKit should prioritize addressing this issue to mitigate risks associated with unauthorized file access and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc.
Related CVEs
Other vulnerabilities affecting the same vendor(s)