Configuration Vulnerability in Docker Sandboxes by Docker
CVE-2026-126329

7.3HIGH

Key Information:

Vendor

Docker

Status
Docker Sandboxes
Vendor
CVE Published:
12 November 2026

What is CVE-2026-126329?

Docker Sandboxes has a configuration vulnerability that allows local unprivileged users to potentially execute commands as root. This occurs when the system reuses existing state and configuration directories without proper verification of their ownership. If an attacker controls the HOME or XDG_STATE_HOME environment variable, and sbx or sandboxd is executed as root, they can substitute control-plane sockets and configurations trusted by the root process. This vulnerability affects both Linux and macOS platforms and is addressed in version 0.53.0.

Affected Version(s)

Docker Sandboxes MacOS 0.7.0 < 0.53.0

Docker Sandboxes MacOS 0.53.0

References

https://docs.docker.com/ai/sandboxes/
product

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ryan Selikow
.