Vulnerability · Published Oct 8, 2026 · Assigned by Docker

CVE-2026-101998Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

Medium 5.9

In plain English

A medium-severity security flaw in Docker Sandboxes from Docker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 4.0)5.9Medium

Exploit odds (30 days)0.2%top 94.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.

Affected products (as reported)

Vendor	Product	Versions
Docker	Docker Sandboxes	0.21.0 – before 0.47.0

Weakness: CWE-636 · Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://docs.docker.com/ai/sandboxes/ product
https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works technical-description