CVE-2026-101998: medium-severity vulnerability in Docker Sandboxes
Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9epss 0.2%
Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Docker · Docker SandboxesRelated CVEs — Docker Sandboxes
In the same product, most dangerous first.
CVE-2026-17106HIGHTar extraction in moby/go-archive can write outside the destination directory via link followingEPSS 0.4%CVE-2026-77179CRITICALDocker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackEPSS 0.2%CVE-2026-105452MEDIUMDocker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsEPSS 0.1%CVE-2026-18171MEDIUMDocker Sandboxes read-only runtime mount writable through its shared-export aliasEPSS 0.1%CVE-2026-12539MEDIUMDocker Sandboxes ICMP egress restriction bypass after daemon restartEPSS 0.1%CVE-2026-79994HIGHDocker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink raceEPSS 0.1%