Technical impact
The vulnerability allows a malicious builder peer to request an in‑context file by name from the host. The build system will resolve the name and return the file contents even if the resolution points outside the intended build context. This behavior enables an attacker to read arbitrary files on the host, potentially exposing sensitive data or system configuration. The weakness is a classic path traversal flaw, catalogued as CWE‑22, and results in unauthorized data disclosure.
Affected Systems
Apple Container is affected. Versions earlier than 1.2.0 are vulnerable; the issue was fixed in container version 1.2.0. The vendor name is Apple, product Container. No other vendor or version details were provided.
Risk and Exploitability
The CVSS base score of 4.3 indicates a low severity vulnerability. EPSS is not available, and the issue is not listed in the CISA KEV catalog, implying a lower likelihood of exploitation. The exploit requires the attacker to act as a builder peer within the container build process; thus, the attack vector is local to the build cluster. Once a malicious peer is introduced, it can read any host file accessible through the build mechanism, posing a moderate confidentiality risk.
