Unauthorized access to files In buildah
Description
A flaw was found in BuildKit. A custom client with valid permissions to access the BuildKit control API can produce an upload request that allows files to escape from the BuildKit-controlled state directory. This could lead to unauthorized modification or disclosure of sensitive data.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel9 | 2:1.43.3-2.el9_8 | ||
rpm rhel10 | - | - |
Aliases
1. 2. 3.