CVE-2026-105452: falha de média gravidade em Docker Sandboxes
Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.1%
Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Docker · Docker SandboxesCVEs relacionadas — Docker Sandboxes
No mesmo produto, das mais perigosas para as menos.
CVE-2026-17106HIGHTar extraction in moby/go-archive can write outside the destination directory via link followingEPSS 0.4%CVE-2026-103916HIGHDocker Sandboxes sbx cp follows workspace symlinks outside the authorized host directoryEPSS 0.2%CVE-2026-77179CRITICALDocker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackEPSS 0.2%CVE-2026-101998MEDIUMFail-open response masking in Docker Sandboxes can expose proxy-managed credentialsEPSS 0.2%CVE-2026-18171MEDIUMDocker Sandboxes read-only runtime mount writable through its shared-export aliasEPSS 0.1%CVE-2026-12539MEDIUMDocker Sandboxes ICMP egress restriction bypass after daemon restartEPSS 0.1%