Security Advisory

CVE-2026-15791

N/A
UNKNOWN

Vulnerability Description

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
Published Date July 21, 2026
Official Source NIST NVD Advisory