Improper input validation in Moby Buildkit

CVE-2026-15792

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Affected products

Moby Buildkit — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

security@docker.com (vendor-advisory)