Mmastodon TechnologyCybersecurity first seen 16 h ago, last 16 h ago, peak #4

New moderate vulnerability disclosed in Moby's BuildKit

Original: 🚨 EUVD-2026-92534 📊 Score: 5.7/10 (CVSS v3.1) 📦 Product: buildkit 🏢 Vendor: moby 📅 Updated: 2026-10-05 📝 A malicious ext

A medium-severity vulnerability, tracked as EUVD-2026-92534 with a CVSS v3.1 score of 5.7, has been disclosed in BuildKit, the build engine maintained by the Moby project. According to the advisory, a malicious external BuildKit frontend can use the internal API to trigger a data race that causes the BuildKit daemon to panic, potentially disrupting container build services. The advisory was updated on 5 October 2026.

Why now: Security teams tracking container infrastructure are reacting to a newly published vulnerability advisory affecting a widely used build tool.

BuildKitMobyEUVD-2026-92534

Open on mastodon →

Evidence

• 🚨 EUVD-2026-92534 📊 Score: 5.7/10 (CVSS v3.1) 📦 Product: buildkit 🏢 Vendor: moby 📅 Updated: 2026-10-05 📝 A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic. 🔗… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1143664