cyfenced.com →

[ CVE-2026-121522 · Published 3 Nov 2026 ]

Vulnerability in moby BuildKit

CVSS 6.7 EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

[ References ]References