Vulnerability in Moby Buildkit
CVE-2026-15788
BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can re…
Affected products
- Moby Buildkit — versions 0
Weakness classification (CWE)
References
- security@docker.com (vendor-advisory)