What is the CVSS score of CVE-2026-33747?

CVE-2026-33747 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Docker are affected by CVE-2026-33747?

BuildKit versions prior to 0.28.1 contain a path traversal vulnerability that allows untrusted container build frontends to write arbitrary files outside their intended sandbox, potentially…. A patch is available.

How to fix or mitigate CVE-2026-33747?

Within 24 hours: Identify all BuildKit deployments and document current versions in use; audit active build configurations for custom frontend usage via #syntax directives. Within 7 days: Disable or restrict use of untrusted custom frontends pending patch availability; implement network segmentation to limit BuildKit container escape impact. Within 30 days: Apply vendor patch immediately upon release to BuildKit 0.28.1 or later; validate all build pipelines post-update.

Docker CVE-2026-33747

HIGH

Path Traversal (CWE-22)

2026-03-26 https://github.com/moby/buildkit

Docker Path Traversal Red Hat Suse

8.4

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Red Hat

8.2 MEDIUM

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 26, 2026 - 18:30 vuln.today

CVE Published

Mar 26, 2026 - 18:26 nvd

HIGH 8.4

DescriptionGitHub Advisory

Impact

When using a custom BuildKit frontend, the frontend can craft an API message that causes files to be written outside of the BuildKit state directory for the execution context.

Patches

The issue has been fixed in v0.28.1+

Workarounds

Issue requires using an untrusted BuildKit frontend set with #syntax or --build-arg BUILDKIT_SYNTAX. Using these options with a well-known frontend image like docker/dockerfile is not affected.

AnalysisAI

BuildKit versions prior to 0.28.1 allow untrusted custom frontends to write arbitrary files outside the execution state directory through crafted API messages, enabling path traversal attacks. This affects users who specify custom frontends via #syntax directives or --build-arg BUILDKIT_SYNTAX parameters with untrusted images. The vulnerability carries a CVSS score of 8.4 with local attack vector requiring no privileges or user interaction, posing high risk to confidentiality, integrity, and availability. No public exploit identified at time of analysis.

Technical ContextAI

BuildKit is the Go-based build toolkit for container images used by Docker and other container platforms, identified by CPE pkg:go/github.com_moby_buildkit. The vulnerability stems from CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), commonly known as path traversal. BuildKit supports extensible frontends that interpret build definitions through an API layer. The flaw exists in how BuildKit validates file paths specified by frontend API messages, allowing malicious frontends to escape the intended state directory boundary and manipulate files in arbitrary filesystem locations. This affects the core API interaction between BuildKit and custom frontend implementations.

RemediationAI

Upgrade BuildKit to version 0.28.1 or later as documented in the official release at https://github.com/moby/buildkit/releases/tag/v0.28.1 and security advisory at https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj. For environments where immediate patching is not feasible, restrict BuildKit frontend usage to trusted sources only by disabling or validating #syntax directives and --build-arg BUILDKIT_SYNTAX parameters. Implement allowlisting for frontend images to permit only well-known frontends like docker/dockerfile from official registries. In multi-tenant or CI/CD environments, enforce policy controls that prevent users from specifying arbitrary custom frontends until patching is complete.

More in Docker

View all

CVE-2024-55964 CRITICAL Emergency POC

9.8 Mar 26

An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl

CVE-2019-5736 HIGH Act Now POC

8.6 Feb 11

runc through version 1.0-rc6 (used in Docker before 18.09.2) contains a container escape vulnerability that allows attac

CVE-2023-32077 HIGH Act Now POC

7.5 Aug 24

Netmaker makes networks with WireGuard. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no a

CVE-2026-39987 CRITICAL Act Now POC

9.3 Apr 08

Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/

CVE-2023-5815 HIGH Act Now POC

8.1 Nov 22

The News & Blog Designer Pack - WordPress Blog Plugin - (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post

CVE-2014-9357 CRITICAL Act Now

10.0 Dec 16

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build

CVE-2026-34156 CRITICAL Act Now POC

9.9 Mar 30

Remote code execution in NocoBase Workflow Script Node (npm @nocobase/plugin-workflow-javascript) allows authenticated l

CVE-2019-15752 HIGH Act Now POC

7.8 Aug 28

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c

CVE-2025-34221 CRITICAL Act Now POC

10.0 Sep 29

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 2

CVE-2024-23054 CRITICAL Act Now POC

9.8 Feb 05

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution du

CVE-2025-23211 CRITICAL Act Now POC

9.9 Jan 28

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Rated critical seve

CVE-2026-46339 CRITICAL Act Now POC

10.0 May 19

Unauthenticated remote code execution in 9router (npm package) versions 0.4.30 through 0.4.36 allows network-adjacent at

Same weakness CWE-22 – Path Traversal

View all

CVE-2019-3396 CRITICAL POC

9.8

CVE-2019-19781 CRITICAL POC

9.8

CVE-2020-5902 CRITICAL POC

9.8

CVE-2021-40444 HIGH POC

8.8

CVE-2021-27065 HIGH POC

7.8

CVE-2019-11510 CRITICAL POC

10.0

CVE-2018-13379 CRITICAL POC

9.1

CVE-2015-0016 HIGH POC

7.8

Same technique Path Traversal

View all

CVE-2025-64446 CRITICAL POC

9.8

CVE-2015-0016 HIGH POC

7.8

CVE-2016-0752 HIGH POC

7.5

CVE-2024-13159 CRITICAL POC

9.8

CVE-2024-13160 CRITICAL POC

9.8

CVE-2024-13161 CRITICAL POC

9.8

CVE-2014-0780 CRITICAL POC

9.8

CVE-2024-48248 HIGH POC

8.6

Vendor StatusVendor

SUSE

Severity: High

Product	Status
openSUSE Tumbleweed	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 12	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed

CVE-2026-33747 vulnerability details – vuln.today

Back

Docker CVE-2026-33747

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

Impact

Patches

Workarounds

AnalysisAI

Technical ContextAI

RemediationAI

More in Docker

Same weakness CWE-22 – Path Traversal

Same technique Path Traversal

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code