CVE-2026-103916 — Vulnerability intelligence
—
Published:
- CVSS
- 8.4
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace a workspace symlink so that a later user-initiated copy reads a host file outside the workspace into the sandbox or writes sandbox-controlled data to a host path outside the workspace with the invoking user's permissions.