Security Advisory

CVE-2026-15793

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-21 16:10:21

Last updated 2026-07-21 16:58:40

Assigner Docker

CVSS score 6.5

State PUBLISHED

Description

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.

← Browse all CVEs View on cve.org ↗