Database/Container, Kubernetes & orchestration
BuildKit: Interactive-container API lacks entitlement checks, so a build can run a privileged container and escape
CVE-2024-23653Container, Kubernetes & orchestrationcurated
Impact
Interactive-container API lacks entitlement checks, so a build can run a privileged container and escape the builder
Who can reach it
Anyone who can submit a build to a shared builder
What to do
Upgrade BuildKit; rebuild builder nodes; never share one BuildKit daemon across tenants
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.