Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-23652— BuildKit possible host system access from mount stub cleaner

Quick assessment

Affected
moby buildkit
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

BuildKit是并发、高速缓存高效且与 Dockerfile 无关的构建器工具包。 BuildKit v0.12.4版本及之前版本存在路径遍历漏洞。攻击者利用该漏洞可以从主机系统中删除容器外部的文件。

CVSS 10.0 · Critical EPSS 2.46% · P84
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-23652

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
BuildKit possible host system access from mount stub cleaner
Source: CVE Program / CVE List V5
Vulnerability Description
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
BuildKit 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BuildKit是并发、高速缓存高效且与 Dockerfile 无关的构建器工具包。 BuildKit v0.12.4版本及之前版本存在路径遍历漏洞。攻击者利用该漏洞可以从主机系统中删除容器外部的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
moby buildkit < 0.12.5 -

II. Public POCs for CVE-2024-23652

# POC Description Source Link Shenlong Link
1 None https://github.com/abian2/CVE-2024-23652 POC Details
AI-Generated POC Premium
Qwen3.6-35B-A3B · 7073 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2024-23652

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-23652 (1)

Vendor Advisories for CVE-2024-23652 (1)

Same Patch Batch · moby · 2024-01-31 · 4 CVEs total

CVE-2024-23653 9.8 CRITICAL BuildKit interactive containers API does not validate entitlements check
CVE-2024-23651 8.7 HIGH BuildKit possible race condition with accessing subpaths from cache mounts
CVE-2024-23650 5.3 MEDIUM BuildKit possible panic when incorrect parameters sent from frontend

IV. Related Vulnerabilities

Same product: buildkit
Same vendor: moby
Same weakness: CWE-22

V. Comments for CVE-2024-23652

No comments yet

Leave a comment