CVE-2026-61711

BuildKit: Custom frontend could bypass Seccomp/AppArmor

Published: Aug 19, 2026Updated: Sep 9, 2026 Sources: CVE List NVDCWE-20

N/ACVSS

NVD MITRE

Description

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/spec_linux.go treated the unsupported value as a non-sandbox mode without requiring the security.insecure entitlement. This disabled Seccomp and AppArmor protections for the build container even though Linux capabilities remained restricted. This issue is fixed in version 0.31.1.

No summary for this CVE yet.

Weaknesses

CWE-20

Affected Products

moby

oss-projectaka docker moby

buildkitOn-prem

Cloud & SaaS / container-orchestration

Exploitability

No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

1 technique

Initial Access

View detailed technique mapping

References

https://github.com/moby/buildkit/security/advisories/GHSA-7236-3392-c5c6

github.com

https://github.com/moby/buildkit/commit/3ea6dd0ce7d269cdb8aa23348718e2c1bf64f109

github.com

https://github.com/moby/buildkit/commit/64bbec89ca43dd95b2853edeca240c33c6729910

github.com

and 1 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-61711 and every CVE in our database. Create a free account — no credit card required.

Create Free Account

Plain-language analysis

Impact assessment and exploitation scenario in plain English

Attack graph visualization

Interactive attack path and kill chain mapping

Exploit details & PoC links

ExploitDB, Metasploit, GitHub PoCs with direct links

Nuclei scanner templates

Ready-to-use vulnerability scanner templates

Full remediation guide

Patch instructions, workarounds, and compliance impact

Interactive AI chat

Ask questions about this vulnerability in natural language

Related vulnerabilities

Semantically similar CVEs and attack patterns

REST API & MCP access

Integrate vulnerability data into your workflows