CVE-2026-61711

mediumcovered by 2 sourcesfirst seen 2026-08-19

Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers. Patches Problem has been fixed in versions v0.31.1+ Workarounds Only use BuildKit frontends from trusted providers.

⚡ Watch CVE-2026-61711

Get an email if CVE-2026-61711 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (2)

mediumGHSA-7236-3392-c5c6: BuildKit: Custom frontend could bypass Seccomp/AppArmorghsa · 2026-08-19
unknownCVE-2026-61711: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressiv…nvd · 2026-08-19

External references

NVD record for CVE-2026-61711

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-61711 status](https://www.csirts.com/badge/CVE-2026-61711)](https://www.csirts.com/cve/CVE-2026-61711)