A malicious BuildKit frontend can submit a specially crafted LLB (lower‑level build) definition that causes the buildkitd daemon to panic and terminate. This crash halts all builds currently running on that daemon, effectively denying service to any user relying on the daemon for container image builds.

The vulnerability affects the Moby BuildKit suite. Any system running the BuildKit daemon and accepting non‑trusted frontends could be impacted. No specific version range is supplied in the advisory, so all versions that allow external frontends are potentially vulnerable.

The CVSS score of 6.9 indicates a medium severity risk. EPSS is not available, but the vulnerability is not listed in CISA’s KEV catalog, suggesting limited documented exploitation. The attack path requires an attacker to supply a malicious frontend or LLB file to buildkitd. An untrusted or compromised frontend can trigger the crash, causing a denial of build services. Because the daemon process stops, all pending builds are interrupted until the service is restarted.