PT-2026-136262
CVE-2026-103916
·
Published
2026-11-03
·
Updated
2026-11-11
Description by
CVSS 4.0
8.4
HighMetricsAV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Docker Sandboxes versions prior to 0.51.0
Description
The
sbx cp command does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace a workspace symlink, allowing it to read host files outside the workspace or write sandbox-controlled data to a host path outside the workspace using the permissions of the invoking user.Recommendations
Update to version 0.51.0.
Found an issue in the description? Have something to add? Feel free to write us 👾