CVE-2026-93316

moby BuildKit

Published 5 Oct 2026 · updated 5 Oct 2026 · Received

7.1 High · CVSS 4.0, docker.com

Description

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.

References