Hillel Twersky

**Name of the Vulnerable Software and Affected Versions** Docker Sandboxes (affected versions not specified) **Description** The egress proxy in Docker Sandboxes may forward client-supplied credentials along with credentials injected by the host. This occurs because the proxy only removes alternate credentials if their values match specific sentinel values. Consequently, untrusted code within an authorized sandbox can provide an unrecognized credential in a supported authentication header. For affected upstream services, this could lead to the request being authenticated to an account controlled by an attacker, potentially exposing data contained within the request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.