BuildKit interactive containers API does not validate entitlements check

BuildKit's interactive containers API failed to properly check permissions, allowing attackers to run privileged containers without proper authorization. This is a critical flaw because it bypasses security controls that are meant to prevent unauthorized access to elevated privileges.

CVE-2024-23653 involves insufficient entitlements validation in BuildKit's interactive container APIs (CWE-863), permitting attackers to execute containers with elevated privileges despite the security.insecure entitlement being disabled at both buildkitd configuration and build request levels. The attack vector requires network access to a BuildKit instance and exploitation could grant complete system compromise. The fix is available in v0.12.5.