Security Advisory
CVE-2026-15793
N/A
UNKNOWN
Vulnerability Description
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.
Published Date
July 21, 2026
Official Source
NIST NVD Advisory