{"id":"CVE-2026-33748","title":"github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components (CVE-2026-33748)","summary":"A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted …","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvssSource":"vendor","cwe":"CWE-22","vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4.22","affected":["assisted_installer_for_red_hat_openshift_container_platform 2","confidential_compute_attestation","migration_toolkit_for_containers","migration_toolkit_for_virtualization","openshift_serverless","build_of_podman_desktop","build_of_podman_desktop_tech_preview","openshift_ai_rhoai","openshift_container_platform 4","openshift_gitops","quay 3","trusted_artifact_signer","openshift_api_for_data_protection 1.3","openshift_api_for_data_protection 1.4","openshift_api_for_data_protection 1.5","openshift_service_mesh 3.0","openshift_service_mesh 3.1","openshift_service_mesh 3.2","openshift_data_foundation 4.20","openshift_data_foundation 4.22","quay 3.14","trusted_artifact_signer 1.3","multicluster_engine_for_kubernetes 2.10","multicluster_engine_for_kubernetes 2.8"],"patched":["openshift_api_for_data_protection 1.3","openshift_api_for_data_protection 1.4","openshift_api_for_data_protection 1.5","openshift_service_mesh 3.0","openshift_service_mesh 3.1","openshift_service_mesh 3.2","openshift_data_foundation 4.20","openshift_data_foundation 4.22","quay 3.14","trusted_artifact_signer 1.3","multicluster_engine_for_kubernetes 2.10","multicluster_engine_for_kubernetes 2.8"],"published":"2026-03-27","updated":"2026-10-09","sourceUpdated":"2026-10-09T04:03:24+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33748.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33748.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-33748"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452271"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33748"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33748"},{"url":"https://docs.docker.com/build/concepts/context/#url-fragments"},{"url":"https://github.com/moby/buildkit/releases/tag/v0.28.1"},{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"},{"url":"https://access.redhat.com/errata/RHSA-2026:51033"},{"url":"https://access.redhat.com/errata/RHSA-2026:29854"},{"url":"https://access.redhat.com/errata/RHSA-2026:26568"},{"url":"https://access.redhat.com/errata/RHSA-2026:9440"},{"url":"https://access.redhat.com/errata/RHSA-2026:9448"},{"url":"https://access.redhat.com/errata/RHSA-2026:9453"},{"url":"https://access.redhat.com/errata/RHSA-2026:57013"},{"url":"https://access.redhat.com/errata/RHSA-2026:37387"},{"url":"https://access.redhat.com/errata/RHSA-2026:70267"},{"url":"https://access.redhat.com/errata/RHSA-2026:10125"},{"url":"https://access.redhat.com/errata/RHSA-2026:46885"},{"url":"https://access.redhat.com/errata/RHSA-2026:30650"},{"url":"https://github.com/moby/buildkit"}],"tags":["csaf","vex","red-hat","osv","go"],"epss":0.00481,"epssPercentile":0.41326,"aliases":["GHSA-4vrq-3vrq-g6gg","GO-2026-4859"],"ecosystem":"go","scores":{"vendor":6.5,"osv":7.5},"ingestedAt":"2026-09-12T03:13:01.754Z","slug":"CVE-2026-33748","body":"## Overview\n\nA flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.\n\n## Vendor advisories\n\n- **RHSA-2026:51033** · Red Hat · fixed in: OpenShift API for Data Protection 1.3 · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51033)\n- **RHSA-2026:29854** · Red Hat · fixed in: OpenShift API for Data Protection 1.4 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:29854)\n- **RHSA-2026:26568** · Red Hat · fixed in: OpenShift API for Data Protection 1.5 · released 2026-06-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:26568)\n- **RHSA-2026:9440** · Red Hat · fixed in: Red Hat OpenShift Service Mesh 3.0 · released 2026-04-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:9440)\n- **RHSA-2026:9448** · Red Hat · fixed in: Red Hat OpenShift Service Mesh 3.1 · released 2026-04-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:9448)\n- **RHSA-2026:9453** · Red Hat · fixed in: Red Hat OpenShift Service Mesh 3.2 · released 2026-04-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:9453)\n- **RHSA-2026:57013** · Red Hat · fixed in: Red Hat Openshift Data Foundation 4.20 · released 2026-08-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:57013)\n- **RHSA-2026:37387** · Red Hat · fixed in: Red Hat Openshift Data Foundation 4.22 · released 2026-07-09 · [advisory](https://access.redhat.com/errata/RHSA-2026:37387)\n- **RHSA-2026:70267** · Red Hat · fixed in: Red Hat Quay 3.14 · released 2026-09-22 · [advisory](https://access.redhat.com/errata/RHSA-2026:70267)\n- **RHSA-2026:10125** · Red Hat · fixed in: Red Hat Trusted Artifact Signer 1.3 · released 2026-04-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:10125)\n- **RHSA-2026:46885** · Red Hat · fixed in: multicluster engine for Kubernetes 2.10 · released 2026-07-27 · [advisory](https://access.redhat.com/errata/RHSA-2026:46885)\n- **Red Hat VEX** · Moderate · affected: Assisted Installer for Red Hat OpenShift Container Platform 2, Confidential Compute Attestation, Migration Toolkit for Containers, Migration Toolkit for Virtualization, OpenShift Serverless, Red Hat Build of Podman Desktop, … · no fix planned: Confidential Compute Attestation, Migration Toolkit for Virtualization, OpenShift Serverless, Red Hat Build of Podman Desktop, … · updated 2026-10-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33748.json)\n\n**github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components** — rated Moderate by Red Hat. Released 2026-03-27, updated 2026-10-09.\n\nAffected:\n\n- Assisted Installer for Red Hat OpenShift Container Platform 2\n- Confidential Compute Attestation\n- Migration Toolkit for Containers\n- Migration Toolkit for Virtualization\n- OpenShift Serverless\n- Red Hat Build of Podman Desktop\n- Red Hat Build of Podman Desktop - Tech Preview\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift Container Platform 4\n- Red Hat OpenShift GitOps\n- Red Hat Quay 3\n- Red Hat Trusted Artifact Signer\n\nFixed:\n\n- OpenShift API for Data Protection 1.3\n- OpenShift API for Data Protection 1.4\n- OpenShift API for Data Protection 1.5\n- Red Hat OpenShift Service Mesh 3.0\n- Red Hat OpenShift Service Mesh 3.1\n- Red Hat OpenShift Service Mesh 3.2\n- Red Hat Openshift Data Foundation 4.20\n- Red Hat Openshift Data Foundation 4.22\n- Red Hat Quay 3.14\n- Red Hat Trusted Artifact Signer 1.3\n- multicluster engine for Kubernetes 2.10\n- multicluster engine for Kubernetes 2.8\n\nNo fix planned:\n\n- Confidential Compute Attestation\n- Migration Toolkit for Virtualization\n- OpenShift Serverless\n- Red Hat Build of Podman Desktop\n- Red Hat Build of Podman Desktop - Tech Preview\n- Red Hat OpenShift Container Platform 4\n- Assisted Installer for Red Hat OpenShift Container Platform 2\n- Migration Toolkit for Containers\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat OpenShift GitOps\n- Red Hat Quay 3\n- Red Hat Trusted Artifact Signer\n\nNot affected:\n\n- OpenShift API for Data Protection 1.3\n- OpenShift API for Data Protection 1.4\n- OpenShift API for Data Protection 1.5\n- Red Hat OpenShift Service Mesh 3.0\n- Red Hat OpenShift Service Mesh 3.1\n- Red Hat OpenShift Service Mesh 3.2\n- Red Hat Openshift Data Foundation 4.20\n- Red Hat Openshift Data Foundation 4.22\n- Red Hat Quay 3.14\n- Kernel Module Management Operator for Red Hat Openshift\n\n## Remediation\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. https://access.redhat.com/errata/RHSA-2026:51033\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. https://access.redhat.com/errata/RHSA-2026:29854\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. https://access.redhat.com/errata/RHSA-2026:26568\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\n## Package advisory (CVE-2026-33748)\n\nAffected packages:\n\n- `github.com/moby/buildkit < 0.28.1`\n\nPatched in:\n\n- `github.com/moby/buildkit 0.28.1`\n\nSource: https://osv.dev/vulnerability/GHSA-4vrq-3vrq-g6gg","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":209505,"id":"CVE-2026-33748","ts":1790149094260,"field":"cvss","old":"7.5","new":"6.5"},{"seq":209504,"id":"CVE-2026-33748","ts":1790149094260,"field":"severity","old":"high","new":"medium"}]}