CVE-2024-23653

CVE-2024-23653 is a critical vulnerability affecting BuildKit, a toolkit used for building container images. It allows an attacker to exploit BuildKit's interactive container APIs to run containers with elevated privileges, even when such operations are normally restricted by security configurations. This vulnerability carries a CVSS score of 9.8 (CRITICAL), indicating a severe risk. It has a network attack vector with low complexity, requiring no user interaction, and can lead to complete compromise of confidentiality, integrity, and availability of the affected system. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation. It is part of a set of "Leaky Vessels" vulnerabilities.