{"id":"CVE-2024-9675","kind":"vulnerability","aliases":["CVE-2024-9675","GHSA-586p-749j-fhwp"],"related":[],"title":"Buildah allows arbitrary directory mount","description":"A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.","summary":"Buildah does not check that user-specified cache mount paths stay inside the cache directory. A RUN instruction in a Containerfile can mount any host directory the Buildah user can access, read and write, into the container.","severity":"high","cvss":7.8,"epss":0.00392,"exploited":false,"exploited_at":null,"products":[{"name":"github.com/containers/buildah","fixed":["1.38.0"],"affected":"< 1.38.0","ecosystem":"go"},{"name":"buildah project buildah","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"redhat openshift container platform","fixed":[],"affected":"= 4.13","ecosystem":"vendor"},{"name":"redhat openshift container platform","fixed":[],"affected":"= 4.14","ecosystem":"vendor"},{"name":"redhat openshift container platform","fixed":[],"affected":"= 4.15","ecosystem":"vendor"},{"name":"redhat openshift container platform","fixed":[],"affected":"= 4.16","ecosystem":"vendor"},{"name":"redhat openshift container platform","fixed":[],"affected":"= 4.17","ecosystem":"vendor"},{"name":"redhat enterprise linux","fixed":[],"affected":"= 8.0","ecosystem":"vendor"},{"name":"redhat enterprise linux","fixed":[],"affected":"= 9.0","ecosystem":"vendor"},{"name":"redhat enterprise linux eus","fixed":[],"affected":"= 8.8","ecosystem":"vendor"},{"name":"redhat enterprise linux eus","fixed":[],"affected":"= 9.0","ecosystem":"vendor"},{"name":"redhat enterprise linux eus","fixed":[],"affected":"= 9.2","ecosystem":"vendor"},{"name":"redhat enterprise linux eus","fixed":[],"affected":"= 9.4","ecosystem":"vendor"},{"name":"redhat enterprise linux for arm 64","fixed":[],"affected":"= 8.0_aarch64","ecosystem":"vendor"},{"name":"redhat enterprise linux for arm 64","fixed":[],"affected":"= 9.0_aarch64","ecosystem":"vendor"},{"name":"redhat enterprise linux for arm 64 eus","fixed":[],"affected":"= 8.8_aarch64","ecosystem":"vendor"},{"name":"redhat enterprise linux for arm 64 eus","fixed":[],"affected":"= 9.0_aarch64","ecosystem":"vendor"},{"name":"redhat enterprise linux for arm 64 eus","fixed":[],"affected":"= 9.2_aarch64","ecosystem":"vendor"},{"name":"redhat enterprise linux for arm 64 eus","fixed":[],"affected":"= 9.4_aarch64","ecosystem":"vendor"},{"name":"redhat enterprise linux for ibm z systems","fixed":[],"affected":"= 8.0_s390x","ecosystem":"vendor"},{"name":"redhat enterprise linux for ibm z systems","fixed":[],"affected":"= 9.0_s390x","ecosystem":"vendor"},{"name":"redhat enterprise linux for ibm z systems eus","fixed":[],"affected":"= 8.8_s390x","ecosystem":"vendor"},{"name":"redhat enterprise linux for ibm z systems eus","fixed":[],"affected":"= 9.0_s390x","ecosystem":"vendor"},{"name":"redhat enterprise linux for ibm z systems eus","fixed":[],"affected":"= 9.2_s390x","ecosystem":"vendor"},{"name":"redhat enterprise linux for ibm z systems eus","fixed":[],"affected":"= 9.4_s390x","ecosystem":"vendor"},{"name":"redhat enterprise linux for power little endian","fixed":[],"affected":"= 8.0_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux for power little endian","fixed":[],"affected":"= 9.0_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux for power little endian eus","fixed":[],"affected":"= 8.8_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux for power little endian eus","fixed":[],"affected":"= 9.0_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux for power little endian eus","fixed":[],"affected":"= 9.2_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux for power little endian eus","fixed":[],"affected":"= 9.4_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux server aus","fixed":[],"affected":"= 8.6","ecosystem":"vendor"},{"name":"redhat enterprise linux server aus","fixed":[],"affected":"= 9.2","ecosystem":"vendor"},{"name":"redhat enterprise linux server aus","fixed":[],"affected":"= 9.4","ecosystem":"vendor"},{"name":"redhat enterprise linux server for power little endian update services for sap solutions","fixed":[],"affected":"= 8.6_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux server for power little endian update services for sap solutions","fixed":[],"affected":"= 8.8_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux server for power little endian update services for sap solutions","fixed":[],"affected":"= 9.0_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux server for power little endian update services for sap solutions","fixed":[],"affected":"= 9.2_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux server for power little endian update services for sap solutions","fixed":[],"affected":"= 9.4_ppc64le","ecosystem":"vendor"},{"name":"redhat enterprise linux server tus","fixed":[],"affected":"= 8.6","ecosystem":"vendor"},{"name":"redhat enterprise linux server tus","fixed":[],"affected":"= 8.8","ecosystem":"vendor"}],"ecosystems":["go","vendor"],"tags":["buildah","ci","containers","cwe-22","go","package"],"not_affected_if":["isolated-build-runners","trusted-containerfiles-only"],"how_to_check":"- Check the Buildah version with `buildah --version` or the Go module version of `github.com/containers/buildah` in go.mod\n- Look for Containerfiles that use `RUN --mount=type=cache` with paths you did not write yourself","fix":"- `github.com/containers/buildah` `1.38.0`","status":"open","published_at":"2024-10-09T15:15:17+00:00","first_seen_at":"2026-10-30T18:35:23+00:00","triaged_at":"2026-10-30T18:35:50+00:00","updated_at":"2026-10-30T18:55:30+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-30T18:35:50Z","model":"claude-haiku-5-5","output":{"fix":"- `github.com/containers/buildah` `1.38.0`","reach":"local","title":"Buildah: cache mounts let a build read and write arbitrary host directories","impact":"medium","summary":"Buildah does not check that user-specified cache mount paths stay inside the cache directory. A RUN instruction in a Containerfile can mount any host directory the Buildah user can access, read and write, into the container.","audience":"developers","category":"package","nicknames":[],"who_cares":["buildah","containers","go","ci"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"build reads and writes arbitrary host directories the user can access","analyst_note":"","how_to_check":"- Check the Buildah version with `buildah --version` or the Go module version of `github.com/containers/buildah` in go.mod\n- Look for Containerfiles that use `RUN --mount=type=cache` with paths you did not write yourself","plain_action":"","needs_analyst":false,"not_affected_if":["trusted-containerfiles-only","isolated-build-runners"],"who_is_affected":"Teams that build container images with Buildah, especially from Containerfiles they do not fully control, such as third-party or untrusted pull requests. Build pipelines running Buildah as a user with access to sensitive host directories are the most exposed. Teams that only run builds from trusted, self-written Containerfiles on isolated runners have less exposure.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.00068,"input_tokens":4172,"output_tokens":525,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2024':7A,15A '-22':291B '-9675':8A,16A '/containers/buildah':19A '586p':11A '64':70A,76A,82A,89A,96A,103A '749j':12A 'access':325B,384C 'allow':2A,357C 'arbitrari':3A,368C 'arm':69A,75A,81A,88A,95A,102A 'aus':201A,206A,211A 'buildah':1A,20A,22A,287B,294B,322B,337C,389C 'cach':302B,308B,338C,351C,355C 'check':297B 'ci':288B 'contain':289B,331B,363C,376C 'container':25A,29A,33A,37A,41A 'containerfil':315B 'cve':6A,14A 'cwe':290B 'directori':4A,309B,320B,356C,369C 'endian':157A,164A,171A,179A,187A,195A,219A,232A,245A,258A,271A 'enterprise':44A,47A,50A,54A,58A,62A,66A,72A,78A,85A,92A,99A,106A,113A,120A,128A,136A,144A,152A,159A,166A,174A,182A,190A,198A,203A,208A,213A,226A,239A,252A,265A,278A,283A 'eus':52A,56A,60A,64A,83A,90A,97A,104A,126A,134A,142A,150A,172A,180A,188A,196A 'fhwp':13A 'file':364C,381C 'for':68A,74A,80A,87A,94A,101A,108A,115A,122A,130A,138A,146A,154A,161A,168A,176A,184A,192A,216A,222A,229A,235A,242A,248A,255A,261A,268A,274A 'found':335C 'ghsa':10A 'ghsa-586p-749j-fhwp':9A 'github.com':18A 'github.com/containers/buildah':17A 'go':292B 'host':319B,372C 'ibm':109A,116A,123A,131A,139A,147A 'insid':306B 'instruct':312B,360C 'linux':45A,48A,51A,55A,59A,63A,67A,73A,79A,86A,93A,100A,107A,114A,121A,129A,137A,145A,153A,160A,167A,175A,183A,191A,199A,204A,209A,214A,227A,240A,253A,266A,279A,284A 'little':156A,163A,170A,178A,186A,194A,218A,231A,244A,257A,270A 'long':378C 'mount':5A,303B,317B,339C,366C 'openshift':24A,28A,32A,36A,40A 'packag':293B 'path':304B,348C 'platform':26A,30A,34A,38A,42A 'power':155A,162A,169A,177A,185A,193A,217A,230A,243A,256A,269A 'project':21A 'proper':342C 'read':326B 'read/write':373C 'redhat':23A,27A,31A,35A,39A,43A,46A,49A,53A,57A,61A,65A,71A,77A,84A,91A,98A,105A,112A,119A,127A,135A,143A,151A,158A,165A,173A,181A,189A,197A,202A,207A,212A,225A,238A,251A,264A,277A,282A 'run':311B,359C,388C 'sap':223A,236A,249A,262A,275A 'server':200A,205A,210A,215A,228A,241A,254A,267A,280A,285A 'services':221A,234A,247A,260A,273A 'solutions':224A,237A,250A,263A,276A 'specifi':301B,347C 'stay':305B 'systems':111A,118A,125A,133A,141A,149A 'tus':281A,286A 'update':220A,233A,246A,259A,272A 'user':300B,323B,346C,387C 'user-specifi':299B,345C 'valid':343C 'vulner':333C 'within':353C 'write':328B 'z':110A,117A,124A,132A,140A,148A","nicknames":[],"mitigations":[],"who_affected":"Teams that build container images with Buildah, especially from Containerfiles they do not fully control, such as third-party or untrusted pull requests. Build pipelines running Buildah as a user with access to sensitive host directories are the most exposed. Teams that only run builds from trusted, self-written Containerfiles on isolated runners have less exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"first_public_at":"2024-10-09T15:15:17+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-586p-749j-fhwp","url":"https://github.com/advisories/GHSA-586p-749j-fhwp","severity":"medium","published_at":"2024-10-09T15:32:21+00:00","modified_at":"2026-10-30T18:33:19+00:00","first_seen_at":"2026-10-30T18:35:23+00:00","fetched_at":"2026-10-30T18:55:51+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-9675","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9675","severity":null,"published_at":"2024-10-09T15:15:17+00:00","modified_at":"2026-10-30T17:17:10+00:00","first_seen_at":"2026-10-30T18:55:30+00:00","fetched_at":"2026-10-30T18:55:30+00:00","note":null}],"documents":[{"id":25186,"url":"https://github.com/containers/buildah/commit/aa67e5d71ee7ec07122a210baa3b13966a9e086c","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":25317,"url":"https://access.redhat.com/errata/RHSA-2024:8675","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25318,"url":"https://access.redhat.com/errata/RHSA-2024:8679","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25319,"url":"https://access.redhat.com/errata/RHSA-2024:8686","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25320,"url":"https://access.redhat.com/errata/RHSA-2024:8690","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25321,"url":"https://access.redhat.com/errata/RHSA-2024:8700","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25316,"url":"https://access.redhat.com/errata/RHSA-2024:8563","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25323,"url":"https://access.redhat.com/errata/RHSA-2024:8707","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25324,"url":"https://access.redhat.com/errata/RHSA-2024:8708","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25325,"url":"https://access.redhat.com/errata/RHSA-2024:8709","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25326,"url":"https://access.redhat.com/errata/RHSA-2024:8846","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25327,"url":"https://access.redhat.com/errata/RHSA-2024:8984","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"},{"id":25322,"url":"https://access.redhat.com/errata/RHSA-2024:8703","title":"Third-party advisory: access.redhat.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: access.redhat.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}