Sandboxing Vulnerability in Docker Products
CVE-2026-103916

8.4HIGH

Key Information:

Vendor

Docker

Status
Docker Sandboxes
Vendor
CVE Published:
3 November 2026

What is CVE-2026-103916?

A security issue in Docker Sandboxes allows for insufficient confinement of host-side paths within a shared workspace. This inadequacy enables a malicious sandbox to manipulate workspace symlinks, potentially allowing unauthorized access to host files or the ability to write unauthorized data to host paths using the invoking user's permissions. This vulnerability poses a significant risk, as it can lead to unintended data exposure and manipulation, thereby compromising system integrity.

Affected Version(s)

Docker Sandboxes MacOS 0.28.0 < 0.51.0

References

https://docs.docker.com/ai/sandboxes/
product
https://docs.docker.com/ai/sandboxes/security/isolation/
technical-description
https://github.com/docker/sbx-releases/releases/tag/v0.51.0
release-notes

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peyton Kennedy of Endor Labs
.