CVE-2024-23653

Summary

CVE-2024-23653: BuildKit, a toolkit for converting source code into build artifacts, was found to have a vulnerability. An attacker could exploit BuildKit's APIs to run containers with elevated privileges, bypassing the usual security checks. This issue only affected builds initiated from untrusted sources. The vulnerability has been addressed in BuildKit version 0.12.5. To mitigate risks, it is recommended to avoid using BuildKit frontends from untrusted sources.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.