---
id: 7208
title: "[CVE-2024-21626] Leaky Vessels: runC and BuildKit container escape vulnerabilities - everything you need to know"
cve: CVE-2024-21626
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/leaky-vessels-container-escape-vulnerabilities"
published_at: "2024-02-05T17:28:28Z"
tags: ["kubernetes", "containers", "container-escape", "runc", "cve-2024-21626", "buildkit"]
phying_url: "https://phying.com/item/7208"
lang: en
---

# [CVE-2024-21626] Leaky Vessels: runC and BuildKit container escape vulnerabilities - everything you need to know

## Summary

The 'Leaky Vessels' flaws in runC (CVE-2024-21626) and BuildKit (three CVEs) enable container escapes to the host filesystem, hitting multi-tenant Kubernetes hardest; patching is urged.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2024-21626
- **Published:** 2024-02-05T17:28:28Z
- **Original:** https://www.wiz.io/blog/leaky-vessels-container-escape-vulnerabilities
- **Phying News:** https://phying.com/item/7208