CVE-2026-33747 | moby buildkit up to 0.28.0 Image Parser path traversal (GHSA-4c29-8rgm-jvjj)

March 27, 2026 Yanac

A vulnerability, which was classified as critical, was found in moby buildkit up to 0.28.0. This vulnerability affects unknown code of the component Image Parser. The manipulation results in path traversal.

This vulnerability is identified as CVE-2026-33747. The attack is only possible with local access. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More