Dockerfile Frontend Memory Exhaustion Issue in Moby BuildKit

CVE-2026-93323

What is CVE-2026-93323?

A vulnerability in the Dockerfile frontend of Moby BuildKit allows the loading of Dockerfile and .dockerignore files from the build context into memory without any size limitations. If a build context contains a file that exceeds the size of 16 MiB, it can cause buildkitd to allocate memory proportional to that oversized file. This may result in memory exhaustion, leading to the termination of the daemon and interrupting active builds on the same instance, negatively impacting overall build performance.

References