CVE-2024-23652

CVE-2024-23652 is a critical path traversal vulnerability in BuildKit, affecting mobyproject buildkit, where a malicious frontend or Dockerfile using RUN --mount can trick the system into deleting files outside the container on the host. It carries a CVSS score of 9.1 (CRITICAL) due to its network-based attack vector, low attack complexity, and high impact on integrity and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.