Vulnerability in Docker Sandboxes
CVE-2026-12539
Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon restarts, so a restart-surviving sandbox forwards ICMP to arb…
Vulnerability class: Dirty Pipe (CVE-2022-0847)
Affected products
- Docker Sandboxes — versions 0.14.0
Weakness classification (CWE)
References
- security@docker.com (product)
- security@docker.com (release-notes)