Docker Docker Sandboxes
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-105452 | 0.21.0 – < 0.43.0 | Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts | MEDIUM 5.9 | 0.1 % | ||
| CVE-2026-101998 | 0.21.0 – < 0.47.0 | Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-105570 | 0.21.0 – < 0.47.0 | Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-79994 | 0.37.0 – < 0.42.0 | Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race | HIGH 8.7 | 0.1 % | ||
| CVE-2026-77179 | 0.28.0 – < 0.42.0 | Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback | CRITICAL 9.4 | 0.2 % | ||
| CVE-2026-17106 | < 0.38.0 | Tar extraction in moby/go-archive can write outside the destination directory via link following | HIGH 7.1 | 0.4 % | ||
| CVE-2026-18171 | 0.35.0 – 0.38.0 | Docker Sandboxes read-only runtime mount writable through its shared-export alias | MEDIUM 5.7 | 0.1 % | ||
| CVE-2026-12539 | 0.14.0 – < 0.33.0 | Docker Sandboxes ICMP egress restriction bypass after daemon restart | MEDIUM 5.7 | 0.1 % | ||
| CVE-2026-12039 | 0.13.0 – < 0.33.0 | Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution | MEDIUM 5.7 | 0.1 % |