Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
buildkitd may let attackers execute code
published 1 month ago
Summary
The buildkitd component in version 0.26.3‑r0 contains a security weakness that could allow a malicious user to run unauthorized commands on the host system. The issue is fixed in newer releases of buildkitd, so updating to the latest version is recommended. Apply the update as soon as possible to keep your environment safe.
What to do
- Update cleanstart buildkitd to version 0.26.3-r0.
- Update buildkitd to version 0.26.3-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | buildkitd |
< 0.26.3-r0 Fix: upgrade to 0.26.3-r0
|
| CleanStart | – | buildkitd |
< 0.26.3-r0 Fix: upgrade to 0.26.3-r0
|
Original advisory text
Security fix for GHSA-vvgc-356p-c3xw applied in: buildkitd 0.26.3-r0
Security vulnerability affects the buildkitd package. This issue is resolved in later releases. See references for vulnerability details.
Severity
7.5
High
Timeline
Published30 Sep 2026
Updated15 Oct 2026
First seen1 Oct 2026
Sources
CLEANSTART-2026-OA69516 · OSV
Track software like this
Free during beta