What’s Vulnerable › Vulnerabilities

CVE-2026-105452: Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

• Severity: medium (CVSS 5.9 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-08 · updated 2026-10-08
• Weakness: CWE-200

Description

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.

Affected products

• Docker Sandboxes: from 0.21.0 before 0.43.0 — fixed in 0.43.0

How to fix

Upgrade to a fixed version: Docker Sandboxes 0.43.0. Check the vendor advisory for mitigations.

References

• https://docs.docker.com/ai/sandboxes/
• https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works

Get alerted when CVE-2026-105452 or the next vulnerability affects your stack