Docker Sandboxes vulnerabilities

• docker sandboxes Docker Sandboxes host Git executes repository-controlled programs CVE-2026-121614 7.1 HighNovember 3, 2026
• docker sandboxes Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory CVE-2026-103916 8.4 HighNovember 3, 2026
• docker sandboxes Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts CVE-2026-105452 5.9 MediumOctober 8, 2026
• docker sandboxes Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials CVE-2026-101998 5.9 MediumOctober 8, 2026
• docker sandboxes Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host CVE-2026-105570 6.7 MediumOctober 8, 2026
• docker sandboxes Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race CVE-2026-79994 8.7 HighSeptember 15, 2026
• docker sandboxes Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback CVE-2026-77179 Public exploit 9.4 CriticalSeptember 15, 2026
• moby go-archive, docker cli, compose +3 more +5 more Tar extraction in moby/go-archive can write outside the destination directory via link following CVE-2026-17106 Public exploitFix available 7.1 HighAugust 18, 2026
• docker sandboxes Docker Sandboxes read-only runtime mount writable through its shared-export alias CVE-2026-18171 5.7 MediumAugust 12, 2026
• docker sandboxes Docker Sandboxes ICMP egress restriction bypass after daemon restart CVE-2026-12539 5.1 MediumJune 18, 2026
• docker sandboxes Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution CVE-2026-12039 5.7 MediumJune 18, 2026