CVE-2026-61712

lowcovered by 2 sourcesfirst seen 2026-08-19

Impact Maliciously crafted base image or build can cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build sources. References This is BuildKit variant of containerd advisory https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq

⚡ Watch CVE-2026-61712

Get an email if CVE-2026-61712 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (2)

lowGHSA-72x6-4j93-7w86: BuildKit has a possible runtime DoS via unbounded group parsingghsa · 2026-08-19
unknownCVE-2026-61712: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressiv…nvd · 2026-08-19

External references

NVD record for CVE-2026-61712

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-61712 status](https://www.csirts.com/badge/CVE-2026-61712)](https://www.csirts.com/cve/CVE-2026-61712)