Auth bypass in Docker Sandboxes
CVE-2026-18171
Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode. The directory s…
Vulnerability class: Broken Access Control
Affected products
- Docker Sandboxes — versions 0.35.0
Weakness classification (CWE)
References
- security@docker.com (product)
- security@docker.com (product)