What’s Vulnerable › Vulnerabilities

CVE-2026-105570: Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

• Severity: medium (CVSS 6.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-08 · updated 2026-10-08
• Weakness: CWE-178

Description

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider's access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.

Affected products

• Docker Sandboxes: from 0.21.0 before 0.47.0 — fixed in 0.47.0

How to fix

Upgrade to a fixed version: Docker Sandboxes 0.47.0. Check the vendor advisory for mitigations.

References

• https://docs.docker.com/ai/sandboxes/
• https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works

Get alerted when CVE-2026-105570 or the next vulnerability affects your stack