CVE-2024-23651

CVE-2024-23651 is a race condition vulnerability in BuildKit (mobyproject buildkit) that allows malicious build steps to access files from the host system. This high-severity flaw (CVSS 7.4) has a network attack vector and high attack complexity, potentially leading to unauthorized host system access. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating heightened awareness. Organizations are advised to update to BuildKit v0.12.5 or implement workarounds to mitigate the risk.