CVE-2026-15791
NONE—CVSS v3
—CVSS v2
0.19%
EPSS (exploit probability)
CWE-22CWE
Description
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
Affected routers (0)
No routers currently mapped to this CVE in our database.