NIXPKGS-2026-2235

Permalink CVE-2026-15792

6.0 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 12 hours ago by @LeSuisse Activity log

Created suggestion 13 hours ago
@LeSuisse ignored
9 packages
- buildkit-nix
- buildkite-cli
- buildkite-agent
- buildkite-agent-metrics
- buildkite-test-collector-rust
- python313Packages.pybuildkite
- python314Packages.pybuildkite
- terraform-providers.buildkite
- terraform-providers.buildkite_buildkite
12 hours ago
@LeSuisse accepted 12 hours ago
@LeSuisse published on GitHub 12 hours ago

Possible panic when incorrect parameters sent from frontend

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

References

https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6 vendor-advisory

Affected products

BuildKit

<0.31.2

Matching in nixpkgs

pkgs.buildkit

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

nixos-unstable 0.31.1
- nixpkgs-unstable 0.31.1
- nixos-unstable-small 0.31.2
nixos-26.05 0.30.0
- nixos-26.05-small 0.30.0
- nixpkgs-26.05-darwin 0.30.0

Ignored packages (9)

pkgs.buildkit-nix

Nix frontend for BuildKit

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-26.05 0.1.1
- nixos-26.05-small 0.1.1
- nixpkgs-26.05-darwin 0.1.1

pkgs.buildkite-cli

Command line interface for Buildkite

nixos-unstable 3.42.0
- nixpkgs-unstable 3.42.0
- nixos-unstable-small 3.42.0
nixos-26.05 3.42.0
- nixos-26.05-small 3.42.0
- nixpkgs-26.05-darwin 3.42.0

pkgs.buildkite-agent

Build runner for buildkite.com

nixos-unstable 3.128.0
- nixpkgs-unstable 3.128.0
- nixos-unstable-small 3.129.0
nixos-26.05 3.127.0
- nixos-26.05-small 3.127.0
- nixpkgs-26.05-darwin 3.127.0

pkgs.buildkite-agent-metrics

Command-line tool (and Lambda) for collecting Buildkite agent metrics

nixos-unstable 5.12.3
- nixpkgs-unstable 5.12.3
- nixos-unstable-small 5.12.3
nixos-26.05 5.12.2
- nixos-26.05-small 5.12.2
- nixpkgs-26.05-darwin 5.12.2

pkgs.buildkite-test-collector-rust

Rust adapter for Buildkite Test Analytics

nixos-unstable 0.1.3
- nixpkgs-unstable 0.1.3
- nixos-unstable-small 0.1.3
nixos-26.05 0.1.3
- nixos-26.05-small 0.1.3
- nixpkgs-26.05-darwin 0.1.3

pkgs.python313Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.python314Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.terraform-providers.buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

pkgs.terraform-providers.buildkite_buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
- nixos-unstable-small 1.35.0
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

Package maintainers

@vdemeester Vincent Demeester <vincent@sbr.pm>
@developer-guy Batuhan Apaydın <developerguyn@gmail.com>

Permalink CVE-2026-15789

6.9 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 12 hours ago by @LeSuisse Activity log

Created suggestion 14 hours ago
@LeSuisse ignored
9 packages
- buildkit-nix
- buildkite-cli
- buildkite-agent
- buildkite-agent-metrics
- buildkite-test-collector-rust
- python313Packages.pybuildkite
- python314Packages.pybuildkite
- terraform-providers.buildkite
- terraform-providers.buildkite_buildkite
12 hours ago
@LeSuisse accepted 12 hours ago
@LeSuisse published on GitHub 12 hours ago

Malicious client can bypass destination directory validation on local sources upload

A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc.

References

https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976 vendor-advisory

Affected products

BuildKit

<0.31.2

Matching in nixpkgs

pkgs.buildkit

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

nixos-unstable 0.31.1
- nixpkgs-unstable 0.31.1
- nixos-unstable-small 0.31.2
nixos-26.05 0.30.0
- nixos-26.05-small 0.30.0
- nixpkgs-26.05-darwin 0.30.0

Ignored packages (9)

pkgs.buildkit-nix

Nix frontend for BuildKit

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-26.05 0.1.1
- nixos-26.05-small 0.1.1
- nixpkgs-26.05-darwin 0.1.1

pkgs.buildkite-cli

Command line interface for Buildkite

nixos-unstable 3.42.0
- nixpkgs-unstable 3.42.0
- nixos-unstable-small 3.42.0
nixos-26.05 3.42.0
- nixos-26.05-small 3.42.0
- nixpkgs-26.05-darwin 3.42.0

pkgs.buildkite-agent

Build runner for buildkite.com

nixos-unstable 3.128.0
- nixpkgs-unstable 3.128.0
- nixos-unstable-small 3.129.0
nixos-26.05 3.127.0
- nixos-26.05-small 3.127.0
- nixpkgs-26.05-darwin 3.127.0

pkgs.buildkite-agent-metrics

Command-line tool (and Lambda) for collecting Buildkite agent metrics

nixos-unstable 5.12.3
- nixpkgs-unstable 5.12.3
- nixos-unstable-small 5.12.3
nixos-26.05 5.12.2
- nixos-26.05-small 5.12.2
- nixpkgs-26.05-darwin 5.12.2

pkgs.buildkite-test-collector-rust

Rust adapter for Buildkite Test Analytics

nixos-unstable 0.1.3
- nixpkgs-unstable 0.1.3
- nixos-unstable-small 0.1.3
nixos-26.05 0.1.3
- nixos-26.05-small 0.1.3
- nixpkgs-26.05-darwin 0.1.3

pkgs.python313Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.python314Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.terraform-providers.buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

pkgs.terraform-providers.buildkite_buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
- nixos-unstable-small 1.35.0
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

Package maintainers

@vdemeester Vincent Demeester <vincent@sbr.pm>
@developer-guy Batuhan Apaydın <developerguyn@gmail.com>

Permalink CVE-2026-15791

1.8 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): None (N)
User Interaction (UI): Active (A)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): Low (L)
Vulnerable System Impact Availability (VA): Low (L)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Active (A)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): Low (L)
Modified Vulnerable System Impact Availability (MVA): Low (L)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 12 hours ago by @LeSuisse Activity log

Created suggestion 14 hours ago
@LeSuisse ignored
9 packages
- buildkit-nix
- buildkite-cli
- buildkite-agent
- buildkite-agent-metrics
- buildkite-test-collector-rust
- python313Packages.pybuildkite
- python314Packages.pybuildkite
- terraform-providers.buildkite
- terraform-providers.buildkite_buildkite
12 hours ago
@LeSuisse accepted 12 hours ago
@LeSuisse published on GitHub 12 hours ago

LLB file operation can be tricked to remove /tmp directory contents

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.

References

https://github.com/moby/buildkit/security/advisories/GHSA-32pv-7hq5-qhwq vendor-advisory

Affected products

BuildKit

<0.31.2

Matching in nixpkgs

pkgs.buildkit

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

nixos-unstable 0.31.1
- nixpkgs-unstable 0.31.1
- nixos-unstable-small 0.31.2
nixos-26.05 0.30.0
- nixos-26.05-small 0.30.0
- nixpkgs-26.05-darwin 0.30.0

Ignored packages (9)

pkgs.buildkit-nix

Nix frontend for BuildKit

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-26.05 0.1.1
- nixos-26.05-small 0.1.1
- nixpkgs-26.05-darwin 0.1.1

pkgs.buildkite-cli

Command line interface for Buildkite

nixos-unstable 3.42.0
- nixpkgs-unstable 3.42.0
- nixos-unstable-small 3.42.0
nixos-26.05 3.42.0
- nixos-26.05-small 3.42.0
- nixpkgs-26.05-darwin 3.42.0

pkgs.buildkite-agent

Build runner for buildkite.com

nixos-unstable 3.128.0
- nixpkgs-unstable 3.128.0
- nixos-unstable-small 3.129.0
nixos-26.05 3.127.0
- nixos-26.05-small 3.127.0
- nixpkgs-26.05-darwin 3.127.0

pkgs.buildkite-agent-metrics

Command-line tool (and Lambda) for collecting Buildkite agent metrics

nixos-unstable 5.12.3
- nixpkgs-unstable 5.12.3
- nixos-unstable-small 5.12.3
nixos-26.05 5.12.2
- nixos-26.05-small 5.12.2
- nixpkgs-26.05-darwin 5.12.2

pkgs.buildkite-test-collector-rust

Rust adapter for Buildkite Test Analytics

nixos-unstable 0.1.3
- nixpkgs-unstable 0.1.3
- nixos-unstable-small 0.1.3
nixos-26.05 0.1.3
- nixos-26.05-small 0.1.3
- nixpkgs-26.05-darwin 0.1.3

pkgs.python313Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.python314Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.terraform-providers.buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

pkgs.terraform-providers.buildkite_buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
- nixos-unstable-small 1.35.0
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

Package maintainers

@vdemeester Vincent Demeester <vincent@sbr.pm>
@developer-guy Batuhan Apaydın <developerguyn@gmail.com>

Permalink CVE-2026-15793

7.3 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): Low (L)
User Interaction (UI): Active (A)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Active (A)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

updated 12 hours ago by @LeSuisse Activity log

Created suggestion 14 hours ago
@LeSuisse ignored
9 packages
- buildkit-nix
- buildkite-cli
- buildkite-agent
- buildkite-agent-metrics
- buildkite-test-collector-rust
- python313Packages.pybuildkite
- python314Packages.pybuildkite
- terraform-providers.buildkite
- terraform-providers.buildkite_buildkite
12 hours ago
@LeSuisse accepted 12 hours ago
@LeSuisse published on GitHub 12 hours ago

Git source checkout from a bundle file could lead to command injection

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.

References

https://github.com/moby/buildkit/security/advisories/GHSA-hw3h-2gp9-cxpv vendor-advisory

Affected products

BuildKit

=<0.31.1

Matching in nixpkgs

pkgs.buildkit

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

nixos-unstable 0.31.1
- nixpkgs-unstable 0.31.1
- nixos-unstable-small 0.31.2
nixos-26.05 0.30.0
- nixos-26.05-small 0.30.0
- nixpkgs-26.05-darwin 0.30.0

Ignored packages (9)

pkgs.buildkit-nix

Nix frontend for BuildKit

nixos-unstable 0.1.1
- nixpkgs-unstable 0.1.1
- nixos-unstable-small 0.1.1
nixos-26.05 0.1.1
- nixos-26.05-small 0.1.1
- nixpkgs-26.05-darwin 0.1.1

pkgs.buildkite-cli

Command line interface for Buildkite

nixos-unstable 3.42.0
- nixpkgs-unstable 3.42.0
- nixos-unstable-small 3.42.0
nixos-26.05 3.42.0
- nixos-26.05-small 3.42.0
- nixpkgs-26.05-darwin 3.42.0

pkgs.buildkite-agent

Build runner for buildkite.com

nixos-unstable 3.128.0
- nixpkgs-unstable 3.128.0
- nixos-unstable-small 3.129.0
nixos-26.05 3.127.0
- nixos-26.05-small 3.127.0
- nixpkgs-26.05-darwin 3.127.0

pkgs.buildkite-agent-metrics

Command-line tool (and Lambda) for collecting Buildkite agent metrics

nixos-unstable 5.12.3
- nixpkgs-unstable 5.12.3
- nixos-unstable-small 5.12.3
nixos-26.05 5.12.2
- nixos-26.05-small 5.12.2
- nixpkgs-26.05-darwin 5.12.2

pkgs.buildkite-test-collector-rust

Rust adapter for Buildkite Test Analytics

nixos-unstable 0.1.3
- nixpkgs-unstable 0.1.3
- nixos-unstable-small 0.1.3
nixos-26.05 0.1.3
- nixos-26.05-small 0.1.3
- nixpkgs-26.05-darwin 0.1.3

pkgs.python313Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.python314Packages.pybuildkite

Python library for the Buildkite API

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.terraform-providers.buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

pkgs.terraform-providers.buildkite_buildkite

None

nixos-unstable 1.34.2
- nixpkgs-unstable 1.34.2
- nixos-unstable-small 1.35.0
nixos-26.05 1.33.0
- nixos-26.05-small 1.33.0
- nixpkgs-26.05-darwin 1.33.0

Package maintainers

@vdemeester Vincent Demeester <vincent@sbr.pm>
@developer-guy Batuhan Apaydın <developerguyn@gmail.com>

Details of issue NIXPKGS-2026-2235

References

Affected products

Matching in nixpkgs

pkgs.buildkit

pkgs.buildkit-nix

pkgs.buildkite-cli

pkgs.buildkite-agent

pkgs.buildkite-agent-metrics

pkgs.buildkite-test-collector-rust

pkgs.python313Packages.pybuildkite

pkgs.python314Packages.pybuildkite

pkgs.terraform-providers.buildkite

pkgs.terraform-providers.buildkite_buildkite

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.buildkit

pkgs.buildkit-nix

pkgs.buildkite-cli

pkgs.buildkite-agent

pkgs.buildkite-agent-metrics

pkgs.buildkite-test-collector-rust

pkgs.python313Packages.pybuildkite

pkgs.python314Packages.pybuildkite

pkgs.terraform-providers.buildkite

pkgs.terraform-providers.buildkite_buildkite

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.buildkit

pkgs.buildkit-nix

pkgs.buildkite-cli

pkgs.buildkite-agent

pkgs.buildkite-agent-metrics

pkgs.buildkite-test-collector-rust

pkgs.python313Packages.pybuildkite

pkgs.python314Packages.pybuildkite

pkgs.terraform-providers.buildkite

pkgs.terraform-providers.buildkite_buildkite

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.buildkit

pkgs.buildkit-nix

pkgs.buildkite-cli

pkgs.buildkite-agent

pkgs.buildkite-agent-metrics

pkgs.buildkite-test-collector-rust

pkgs.python313Packages.pybuildkite

pkgs.python314Packages.pybuildkite

pkgs.terraform-providers.buildkite

pkgs.terraform-providers.buildkite_buildkite

Package maintainers