CVE-2020-10696: Path Traversal in Buildah
Summary
CVE-2020-10696: Path Traversal in Buildah. Affects github.com/containers/buildah versions < 1.14.4. Fixed in 1.14.4. How to fix ↓
Also tracked for
- golang-github-containers-buildah · Debian:11
The same CVE-2020-10696 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Buildah is a tool that facilitates building OCI container images. It is written in Go and is a part of the Containers project. Buildah allows users to create container images from scratch or modify existing images. It provides a command-line interface for building, managing, and manipulating containers. However, versions before 1.14.5 of Buildah are vulnerable to a path traversal flaw.
Vulnerability Detail
The path traversal vulnerability in Buildah allows an attacker to deceive a user into building a malicious container image hosted on an HTTP(s) server. By exploiting this vulnerability, the attacker can write files to the user's system in any location where the user has permissions. This can lead to arbitrary code execution, unauthorized access, and potential compromise of the user's system.
How To Fix
Latest published version: v1.43.5 as of 22 Oct 2026
go get github.com/containers/buildah@v1.43.5Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.14.4
This is the first release that contains the fix.
go get github.com/containers/buildah@v1.14.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update Buildah to the patched version to mitigate the risk of exploitation.
Conclusion
The path traversal vulnerability in Buildah can be mitigated by updating to version 1.14.5 or later. It is essential to promptly apply the patch to prevent potential exploitation. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for github.com/containers/buildah →
FAQ
Buildah is a tool used for building OCI container images. It provides a command-line interface for creating and modifying containers.
This vulnerability allows an attacker to write files to the user's system, potentially leading to arbitrary code execution and unauthorized access.
To fix this vulnerability, update Buildah to version 1.14.5 or later.
No, there is no known workaround for this vulnerability. Updating to the patched version is the recommended solution.
You can find more information about this vulnerability in the official advisory provided by the project maintainers.
Related vulnerabilities
Recent vulnerabilities recorded for github.com/containers/buildah.
