Docker Sandbox Vulnerability in Service Republishing
CVE-2026-126330

2.4LOW

Key Information:

Vendor

Docker

Status
Docker Sandboxes
Vendor
CVE Published:
12 November 2026

What is CVE-2026-126330?

A flaw in Docker Sandboxes allows services to be silently republished after the removal of their host-port mapping. When an operator removes the active binding, the original publication request is retained, leading to potential exposure if an attacker accesses the restored endpoint. This vulnerability affects both TCP and UDP mappings but is limited to the default loopback bind address. It can allow unauthorized access to services, making it imperative for users to upgrade to version 0.53.0 or later for mitigation.

Affected Version(s)

Docker Sandboxes 0.34.0 < 0.53.0

Docker Sandboxes 0.53.0

References

https://docs.docker.com/ai/sandboxes/
product

CVSS V4

Score:
2.4
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ruben Boonen
.