BuildKit vulnerable to malicious frontend causing file escape outside of storage root

Cache poisoning via unvalidated image layer DiffIDs

Git source checkout from a bundle file could lead to command injection

Possible panic when incorrect parameters sent from frontend

LLB file operation can be tricked to remove /tmp directory contents

Malicious client can bypass destination directory validation on local sources upload

WCOW cache mount source selector resolves NTFS junctions outside of cache root

BuildKit Git URL subdir component can cause access to restricted files

BuildKit: Malicious client can bypass destination directory validation on local sources upload

Starting daemon with --cdi-disabled flag can lead to panic on specific builds

Malformed LLB file operation can crash buildkitd

Malformed MergeOp can crash the BuildKit daemon

Oversized Dockerfile or .dockerignore can exhaust buildkitd memory

Crafted Git build source can bypass certain policy validation

BuildKit improperly handles special files in build snapshots

Container blob cache can accept unverified content

BuildKit proxy CA cleanup can be disrupted by build steps

A malicious frontend can cause a daemon panic

BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit: Possible runtime DoS via unbounded group parsing