Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
💀 CRITICAL Exploits Trending ├ CVE-2025-55182 · Meta/React “React2Shell” · 2 more PoCs live (10) ├ CVE-2026-72898 · Metabase · PoC live (10) ├ CVE-2026-10520 · PoC live (10) └ CVE-2024-23652 + CVE-2022-0492 · Moby (Docker) · Container escape PoC live (8.9)
[EXPLOIT] CVE-2024-23652, CVE-2022-0492 [CRITICAL/PoC] CVSS: 8.9 | Vendor: #moby, #insyde CVE-stand 🔗 https://exploitgrid.net/exploits/f1aa4b39-b910-4ae3-849c-7d3e5523641a
ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2024-23652, CVE-2022-0492 (CVSS: 8.9) moby CVE-2025-55182 (CVSS: 10) Meta CVE-2025-55182 (CVSS: 10) Meta CVE-2026-10520 (CVSS: 10) CVE-2026-72898 (CVSS: 10) metabase ..🧵👇
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mobyproject | buildkit | - | - | - |