{"id":"CVE-2026-103916","published":"2026-11-03T17:17:52.847","lastModified":"2026-11-03T20:32:50.687","description":"Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace a workspace symlink so that a later user-initiated copy reads a host file outside the workspace into the sandbox or writes sandbox-controlled data to a host path outside the workspace with the invoking user's permissions.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-59"],"vendors":[],"products":[],"references":[{"url":"https://docs.docker.com/ai/sandboxes/","tags":[]},{"url":"https://docs.docker.com/ai/sandboxes/security/isolation/","tags":[]},{"url":"https://github.com/docker/sbx-releases/releases/tag/v0.51.0","tags":[]}],"exploitRefs":[{"url":"https://github.com/docker/sbx-releases/releases/tag/v0.51.0","tags":[]}],"hasPoc":true,"ai":null}