CVE-2026-121522
In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata…
- Risk score
- 40/100
- CVSS
- 6.7 v4.0
- Published
- 3 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.
- Affected
- See advisory
- Fix
- Upgrade the product to 0.34.2 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 6.7 medium
References
Original description
In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.
Last activity 3 Nov 2026. Patch Forecast updates every hour.