CVE-2026-121614

Name of the Vulnerable Software and Affected Versions Docker Sandboxes versions 0.31.0 through 0.49.0

Description Docker Sandboxes fail to neutralize repository-controlled Git configurations when executing specific host-side Git commands. An attacker capable of modifying a host repository's Git configuration, such as through a direct-mode sandbox with read-write access to the repository, can configure core.fsmonitor or other Git settings to invoke an external program. This program can be executed on the host with the permissions of the invoking user, bypassing the microVM isolation of the sandbox, during a subsequent clone-mode fetch or an sbx kit push (starting in version 0.39.0).

Recommendations Update Docker Sandboxes to version 0.50.0.