Docker Docker Sandboxes vulnerabilities

Newest CVEs

• CVE-2026-121614

  Docker Sandboxes host Git executes repository-controlled programs

  Docker · Docker Sandboxes

  High7.1
• CVE-2026-103916

  Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

  Docker · Docker Sandboxes

  High8.4
• CVE-2026-105452

  Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

  Docker · Docker Sandboxes

  Medium5.9
• CVE-2026-101998

  Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

  Docker · Docker Sandboxes

  Medium5.9
• CVE-2026-105570

  Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

  Docker · Docker Sandboxes

  Medium6.7
• CVE-2026-79994

  Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

  Docker · Docker Sandboxes

  High8.7
• CVE-2026-77179

  Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

  Docker · Docker Sandboxes

  Critical9.4
• CVE-2026-17106

  Tar extraction in moby/go-archive can write outside the destination directory via link following

  moby · go-archive

  High7.1
• CVE-2026-18171

  Docker Sandboxes read-only runtime mount writable through its shared-export alias

  Docker · Docker Sandboxes

  Medium5.7
• CVE-2026-12539

  Docker Sandboxes ICMP egress restriction bypass after daemon restart

  Docker · Docker Sandboxes

  Medium5.1