Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

fstec логотип

BDU:2026-07210

Опубликовано: 27 мар. 2026
Источник: fstec
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

Уязвимость программного средства сборки контейнеров BuildKit связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации

Вендор

Red Hat Inc.
ООО «Ред Софт»
Docker Inc.

Наименование ПО

OpenShift Container Platform
Red Hat Quay
Openshift Service Mesh
РЕД ОС
Red Hat Openshift Data Foundation
Red Hat OpenShift GitOps
OpenShift Developer Tools and Services
Node HealthCheck Operator
Network Observability Operator
Migration Toolkit for Virtualization
OpenShift Serverless
OpenShift Dev Spaces
Migration Toolkit for Containers
OpenShift API for Data Protection
Logging subsystem for Red Hat OpenShift
multicluster engine for Kubernetes
Red Hat OpenStack Platform
Red Hat Advanced Cluster Management for Kubernetes 2
Red Hat Enterprise Linux
Confidential Compute Attestation
Assisted Installer for Red Hat OpenShift Container Platform
Red Hat Trusted Artifact Signer
Ansible Automation Platform
Red Hat OpenShift AI
Migration Toolkit for Applications
BuildKit
Red Hat Build of Podman Desktop
Logical Volume Manager Storage
Power monitoring for Red Hat OpenShift
Kernel Module Management Operator for Red Hat Openshift
Red Hat Build of Kueue

Версия ПО

4 (OpenShift Container Platform)
3 (Red Hat Quay)
2 (Openshift Service Mesh)
7.3 (РЕД ОС)
4 (Red Hat Openshift Data Foundation)
- (Red Hat OpenShift GitOps)
- (OpenShift Developer Tools and Services)
- (Node HealthCheck Operator)
- (Network Observability Operator)
- (Migration Toolkit for Virtualization)
- (OpenShift Serverless)
- (OpenShift Dev Spaces)
- (Migration Toolkit for Containers)
- (OpenShift API for Data Protection)
- (Logging subsystem for Red Hat OpenShift)
- (multicluster engine for Kubernetes)
18.0 (Red Hat OpenStack Platform)
- (Red Hat Advanced Cluster Management for Kubernetes 2)
10 (Red Hat Enterprise Linux)
3 (Openshift Service Mesh)
- (Confidential Compute Attestation)
2 (Assisted Installer for Red Hat OpenShift Container Platform)
8.0 (РЕД ОС)
1.3 (Red Hat Trusted Artifact Signer)
2 (Ansible Automation Platform)
- (Red Hat OpenShift AI)
3.1 (Openshift Service Mesh)
3.2 (Openshift Service Mesh)
8 (Migration Toolkit for Applications)
до 0.28.1 (BuildKit)
- (Red Hat Build of Podman Desktop)
- (Logical Volume Manager Storage)
- (Power monitoring for Red Hat OpenShift)
- (Kernel Module Management Operator for Red Hat Openshift)
- (Red Hat Build of Kueue)
Tech Preview (Red Hat Build of Podman Desktop)

Тип ПО

Прикладное ПО информационных систем
Операционная система
ПО виртуализации/ПО виртуального программно-аппаратного средства
ПО программно-аппаратного средства

Операционные системы и аппаратные платформы

ООО «Ред Софт» РЕД ОС 7.3
Red Hat Inc. Red Hat Enterprise Linux 10
ООО «Ред Софт» РЕД ОС 8.0

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,8)
Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 7,5)

Возможные меры по устранению уязвимости

Использование рекомендаций:
Для BuildKit:
https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg
Для РедОС:
https://redos.red-soft.ru/search/?iblock_id=&q=CVE-2026-33748
Для программных продуктов Red Hat Inc.:
https://access.redhat.com/security/cve/cve-2026-33748

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 37%
0.00463
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Связанные уязвимости

CVSS3: 7.5
redos
3 месяца назад

Уязвимость buildkit

CVSS3: 7.5
ubuntu
4 месяца назад

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.

CVSS3: 6.5
redhat
4 месяца назад

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.

CVSS3: 7.5
nvd
4 месяца назад

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the same mounted filesystem. The issue has been fixed in version v0.28.1 The issue affects only builds that use Git URLs with a subpath component. As a workaround, avoid building Dockerfiles from untrusted sources or using the subdir component from an untrusted Git repository where the subdir component could point to a symlink.

CVSS3: 7.5
debian
4 месяца назад

BuildKit is a toolkit for converting source code to build artifacts in ...

EPSS

Процентиль: 37%
0.00463
Низкий

7.5 High

CVSS3

7.8 High

CVSS2