Vulnerability in Docker Sandboxes
CVE-2026-12039
Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host resolver whenever the network is internet-connected, without consulting the policy. A workload inside a sandbox, which the threat model treats as untrusted, can therefore encode data into DNS labels for an attacker-controlled domain and exfiltrate it through a DNS covert channel, bypassing the configured allowlist.
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (4.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 4th percentile — 4.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- Docker Sandboxes — versions 0.13.0
Weakness classification (CWE)
References
- docs.docker.com/ai/sandboxes/ (product)
- github.com/docker/sbx-releases/releases/tag/v0.33.0 (release-notes)