Dashboard / CVE-2026-15789

CVE-2026-15789

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 39/100
Published: 2026-07-21 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: None
VI: High
VA: High

Description

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
mobyproject buildkit < 0.31.2

References & Advisories (1)

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.9 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.31%
Raw Score 0.003140
Percentile 24.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00314
2026-10-28
0.00314

Intelligence Sources

nvd ref →

External Links