CVE-2024-9675 — Buildah: buildah allows arbitrary directory mount
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction …
Published: 2024-10-09 · CVSS: 7.8 · CVSS 3.1
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7