EUVD-2026-46312Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Malicious Git source is network-delivered (AV:N) but needs the non-default checkoutbundle option and a crafted repo (AC:H), a low-priv build client (PR:L), and a triggered build (UI:R); command execution gives C/I/A:H.
AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (Docker).
CVSS VectorVendor: Docker
Lifecycle Timeline
6DescriptionCVE.org
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.
AnalysisAI
Argument injection in Moby BuildKit lets a malicious Git source trigger crafted command invocation on the build host when a custom frontend or a client using the raw low-level API enables the non-default git.checkoutbundle=true option during Git source checkout. The flaw affects builds that opt into this experimental checkout behavior rather than standard Dockerfile builds, and a successful attack yields high-impact command execution in the build environment. No public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Technical ContextAI
BuildKit (moby/buildkit) is the modern concurrent, cache-efficient build engine that backs Docker Buildx and many CI/CD image-build pipelines. It exposes a low-level LLB API and a frontend interface that let custom clients drive builds programmatically, including how Git sources are fetched. The vulnerability is a CWE-88 (Argument Injection / improper neutralization of argument delimiters in a command) issue in the Git source handling path: when git.checkoutbundle=true is set, BuildKit invokes git tooling with data derived from the potentially attacker-controlled Git source, and attacker-influenced values can be interpreted as additional command arguments rather than inert data, resulting in a crafted command invocation on the host.
RemediationAI
Consult the Docker/Moby advisory GHSA-hw3h-2gp9-cxpv (https://github.com/moby/buildkit/security/advisories/GHSA-hw3h-2gp9-cxpv) and upgrade BuildKit to the patched release listed there; an exact fix version is not present in the provided intelligence, so treat the advisory as the source of the version (Patch available per vendor advisory - released patched version not independently confirmed from this data). As a compensating control until patched, do not set git.checkoutbundle=true in custom frontends or low-level API clients (leave Git checkout in its default, non-bundle mode), which removes the vulnerable code path at the cost of losing the checkout-bundle behavior. Additionally, restrict builds to trusted Git sources and pin/validate repository origins so untrusted, attacker-controlled repositories cannot be fed into pipelines that use the raw API, accepting the operational overhead of source allowlisting.
Moby is an open source container framework developed by Docker Inc. Rated high severity (CVSS 8.7), this vulnerability i
Moby is an open source container framework developed by Docker Inc. Rated medium severity (CVSS 6.8), this vulnerability
moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger mult
An issue was discovered in Docker Moby before 17.06.0. Rated high severity (CVSS 7.5), this vulnerability is remotely ex
Tar extraction path traversal in moby/go-archive allows an attacker who controls archive contents to create or overwrite
Path traversal in the BuildKit daemon allows a client with valid control API access to craft a malicious upload request
Moby) is an open source container framework developed by Docker Inc. Rated medium severity (CVSS 6.8), this vulnerabilit
moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. Rated medium severity (
moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/image_history.go. Rated medium severi
Moby is an open-source project created by Docker to enable software containerization. Rated medium severity (CVSS 6.3),
Moby is an open-source project created by Docker to enable software containerization. Rated medium severity (CVSS 6.3),
Moby is an open-source project created by Docker to enable software containerization. Rated medium severity (CVSS 6.3),
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Micro 6.0 | Affected |
| SUSE Linux Micro 6.1 | Affected |
| openSUSE Leap 16.0 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today