Vulnerability · Published Oct 8, 2026 · Assigned by Docker

CVE-2026-105452Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Medium 5.9

In plain English

A medium-severity information exposure in Docker Sandboxes from Docker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 4.0)5.9Medium

Exploit odds (30 days)0.1%top 96.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.

Affected products (as reported)

Vendor	Product	Versions
Docker	Docker Sandboxes	0.21.0 – before 0.43.0

Weakness: CWE-200 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://docs.docker.com/ai/sandboxes/ product
https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works technical-description