CVE-2026-105570

Name of the Vulnerable Software and Affected Versions Docker Sandboxes (affected versions not specified)

Description Docker Sandboxes performed case-sensitive comparisons of OAuth token-endpoint hostnames when determining if managed credential responses should be masked, whereas request routing handled DNS hostnames case-insensitively. This discrepancy allows untrusted code within a sandbox to use a case-variant hostname to connect to a legitimate provider endpoint and bypass response masking. Consequently, if a user completes the OAuth flow, the provider's access and refresh tokens may be returned unmasked to the sandbox, exposing host-managed credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.