Database/Container, Kubernetes & orchestration
BuildKit: "Leaky Vessels": RUN --mount empty-file removal can delete arbitrary host files
CVE-2024-23652Container, Kubernetes & orchestrationcurated
Impact
"Leaky Vessels": RUN --mount empty-file removal can delete arbitrary host files; complete builder compromise
Who can reach it
Malicious Dockerfile or frontend submitted to a shared builder
What to do
Upgrade BuildKit/buildx everywhere; treat any shared tenant builder as compromised and rebuild it
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.