diff --git a/pkg/progress/command.go b/pkg/progress/command.go
index f748509f..7f436cc5 100644
--- a/pkg/progress/command.go
+++ b/pkg/progress/command.go
@@ -186,7 +186,7 @@ func runOSBuildWithProgress(pb ProgressBar, manifest []byte, exports []string, o
 		}
 		// forward to user
 		if st.Message != "" {
-			pb.SetMessagef(st.Message)
+			pb.SetMessagef("%s", st.Message)
 		}
 
 		// keep internal log for error reporting, forward to