CVE-2026-75593Suited to automated attack · CISA
BuildKit: Malicious client can bypass destination directory validation on local sources upload
CVSS score
7.2
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-35469
SpdyStream: DOS on CRI
M
Patch verifiedEPSS %1
6.8
CVE-2026-33997
Moby: Off-by-one error in plugin privilege validation
M
Patch status unknownEPSS %1
7.1
CVE-2026-17106
Tar extraction in moby/go-archive can write outside the destination directory via link following
M
Patch verifiedEPSS %0
5.3
CVE-2026-61711
BuildKit: Custom frontend could bypass Seccomp/AppArmor
M
Patch verifiedEPSS %0
7.1
CVE-2026-93316
Starting daemon with --cdi-disabled flag can lead to panic on specific builds
M
Patch verifiedEPSS %0
6.0
CVE-2026-93326
Crafted Git build source can bypass certain policy validation
M
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-75593"