CVE-2026-103916: fallo de gravedad alta en Docker Sandboxes
Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.4epss 0.2%
Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace a workspace symlink so that a later user-initiated copy reads a host file outside the workspace into the sandbox or writes sandbox-controlled data to a host path outside the workspace with the invoking user's permissions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Docker · Docker SandboxesCVEs relacionadas — Docker Sandboxes
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-17106HIGHTar extraction in moby/go-archive can write outside the destination directory via link followingEPSS 0.4%CVE-2026-77179CRITICALDocker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackEPSS 0.2%CVE-2026-101998MEDIUMFail-open response masking in Docker Sandboxes can expose proxy-managed credentialsEPSS 0.2%CVE-2026-105452MEDIUMDocker Sandboxes egress proxy could forward unrecognized client credentials to managed hostsEPSS 0.1%CVE-2026-18171MEDIUMDocker Sandboxes read-only runtime mount writable through its shared-export aliasEPSS 0.1%CVE-2026-12539MEDIUMDocker Sandboxes ICMP egress restriction bypass after daemon restartEPSS 0.1%