Evidence · DiggingBeagle record
Advisory: Docker Sandboxes sbx cp symlink escape permits copying private host files or overwriting host paths
A sandbox can plant symbolic links under the shared workspace that point outside the permitted tree. Host-side sbx cp followed those links when users copied files to or from the sandbox. CVE-2026-103916 documents host-private file reads and overwrites within invoking-user permissions, fixed in Docker Sandboxes 0.51.0. An explicit host copy operation and planted link are prerequisites. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
A sandbox can plant symbolic links under the shared workspace that point outside the permitted tree. Host-side sbx cp followed those links when users copied files to or from the sandbox. CVE-2026-103916 documents host-private file reads and overwrites within invoking-user permissions, fixed in Docker Sandboxes 0.51.0. An explicit host copy operation and planted link are prerequisites. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (2)
- supportsDocker Sandboxes copied host files beyond workspace limits through symlinks: CVE-2026-103916 documents host-private file reads and overwrites within invoking-user permissions, fixed in Docker Sandboxes 0.51.0. An explicit host copy operation and planted link are prerequisites.
GHSA-82h2-77xp-45m9; symlink traversal reproduction and version fix
- supportsDocker Sandboxes copied host files beyond workspace limits through symlinks: A sandbox can plant symbolic links under the shared workspace that point outside the permitted tree. Host-side sbx cp followed those links when users copied files to or from the sandbox.
GHSA-82h2-77xp-45m9; symlink traversal reproduction and version fix