A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_70640 advisory.

    * buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3140 advisory.

    A custom client can produce such an upload request to the BuildKit daemon that files can escape from the     BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit     control API to issue builds, e.g., bypass authentication, etc. (CVE-2026-15789)

    A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp     directory. The action that can normally be used to delete files inside the build container rootfs can     escape into the real host temp directory. (CVE-2026-15791)

    A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing     with a panic. (CVE-2026-15792)

    BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when     checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation     on the host. (CVE-2026-15793)

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the     ApplyLayer helpers) do not confine filesystem operations to the destination directory. A crafted archive     can create or overwrite files outside the intended destination. (CVE-2026-17106)

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Previously, after a channel has been established, a malicious peer could send crafted messages that would     deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled     explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of     buffering and blocking. (CVE-2026-56855)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a     crafted build request, and executor/oci/spec_linux.go treated the unsupported value as a non-sandbox mode     without requiring the security.insecure entitlement. This disabled Seccomp and AppArmor protections for     the build container even though Linux capabilities remained restricted. This issue is fixed in version     0.31.1. (CVE-2026-61711)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files     without an upper bound while resolving a username to a user identifier or group identifier in     executor/oci/user.go and solver/llbsolver/ops/user_linux.go. A malicious base image or build could provide     oversized files that exhausted memory during user resolution and caused out-of-memory termination of the     buildkitd process. This issue is fixed in version 0.31.1. (CVE-2026-61712)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit     daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid     permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is     fixed in version 0.31.2. (CVE-2026-75593)

    Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious     peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an     atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every     packet other than the open confirmation/failure, without blocking and without tearing down the connection.
    (CVE-2026-78662)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of runfinch-finch installed on the remote host is prior to 1.19.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-142 advisory.

    A custom client can produce such an upload request to the BuildKit daemon that files can escape from the     BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit     control API to issue builds, e.g., bypass authentication, etc. (CVE-2026-15789)

    A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp     directory. The action that can normally be used to delete files inside the build container rootfs can     escape into the real host temp directory. (CVE-2026-15791)

    A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing     with a panic. (CVE-2026-15792)

    BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when     checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation     on the host. (CVE-2026-15793)

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the     ApplyLayer helpers) do not confine filesystem operations to the destination directory. A crafted archive     can create or overwrite files outside the intended destination. (CVE-2026-17106)

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Previously, after a channel has been established, a malicious peer could send crafted messages that would     deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled     explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of     buffering and blocking. (CVE-2026-56855)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a     crafted build request, and executor/oci/spec_linux.go treated the unsupported value as a non-sandbox mode     without requiring the security.insecure entitlement. This disabled Seccomp and AppArmor protections for     the build container even though Linux capabilities remained restricted. This issue is fixed in version     0.31.1. (CVE-2026-61711)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files     without an upper bound while resolving a username to a user identifier or group identifier in     executor/oci/user.go and solver/llbsolver/ops/user_linux.go. A malicious base image or build could provide     oversized files that exhausted memory during user resolution and caused out-of-memory termination of the     buildkitd process. This issue is fixed in version 0.31.1. (CVE-2026-61712)

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit     daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid     permissions to access BuildKit control API to issue builds, eg., bypass authentication, etc. This issue is     fixed in version 0.31.2. (CVE-2026-75593)

    Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious     peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an     atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every     packet other than the open confirmation/failure, without blocking and without tearing down the connection.
    (CVE-2026-78662)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70640 advisory.

    - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862
    - Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1915:08 advisory.

    * buildah: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service     (CVE-2026-56853)
      * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
      * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
      * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)
      * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70640 advisory.

    * buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a205d8bdfd advisory.

    Update to 1.169.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70640 advisory.

    * buildah: Go net/[http:](http:) Unencrypted HTTP/2 connections vulnerable to Denial of Service     (CVE-2026-56853)
      * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
      * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
      * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)
      * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70640 advisory.

    The buildah package provides a tool for facilitating building OCI container images. Among other things,     buildah enables you to: Create a working container, either from scratch or using an image as a starting     point; Create an image, either from a working container or using the instructions in a Dockerfile; Build     both Docker and OCI images.

    Security Fix(es):

    * buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)

    * buildah: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * buildah: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)

    * buildah: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)

    * buildah: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ad8394dc92 advisory.

    Update to 1.169.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
356527	Rocky Linux 9 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (crlsa-2026_70640)	Nessus	Rocky Linux Local Security Checks	Local	medium
351079	Amazon Linux 2023 : runfinch-finch (ALAS2023-2026-3140)	Nessus	Amazon Linux Local Security Checks	Local	high
351054	Amazon Linux 2 : runfinch-finch (ALASDOCKER-2026-142)	Nessus	Amazon Linux Local Security Checks	Local	high
350188	Oracle Linux 9 : buildah (ELSA-2026-70640)	Nessus	Oracle Linux Local Security Checks	Local	medium
350184	MiracleLinux 9 : buildah-1.43.3-2.el9_8 (AXSA:2026-1915:08)	Nessus	Miracle Linux Local Security Checks	Local	medium
349899	RockyLinux 9 : buildah (RLSA-2026:70640)	Nessus	Rocky Linux Local Security Checks	Local	medium
349778	Fedora 45 : doctl (2026-a205d8bdfd)	Nessus	Fedora Local Security Checks	Local	medium
349754	AlmaLinux 9 : buildah (ALSA-2026:70640)	Nessus	Alma Linux Local Security Checks	Local	medium
349626	RHEL 9 : buildah (RHSA-2026:70640)	Nessus	Red Hat Local Security Checks	Local	medium
348335	Fedora 44 : doctl (2026-ad8394dc92)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2026-15789

medium

Tenable Plugins

medium

high

high

medium

medium

medium

medium

medium

medium

medium