CVE-2026-101998— Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
Quick assessment
Affected
Docker Docker Sandboxes
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Docker 沙箱在保护代理响应中掩盖凭据时，可能会发生“开放失败”（fail-open）的情况。当响应体读取操作返回数据的同时伴随错误时，受影响的处理器可能会转发未掩盖的字节。授权沙箱内的代码可以利用此漏洞，恢复由主机管理的 OAuth 访问令牌和刷新令牌，或恢复本应保留在沙箱之外的派生 Anthropic API 密钥。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Docker | Docker Sandboxes | 0.21.0< 0.47.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-101998
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
Source: CVE Program / CVE List V5
Vulnerability Description
Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
未能安全地进行程序失效(Failing Open)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Docker | Docker Sandboxes | 0.21.0 ~ 0.47.0 |
cpe:2.3:a:docker:docker_sandboxes:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-101998
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-101998
请登录查看更多情报信息。
Vendor Pages for CVE-2026-101998 (1)
-
🔗 Docker Sandboxes | Docker Docs product
Same Patch Batch · Docker · 2026-10-08 · 3 CVEs total
| CVE-2026-105570 | 6.7 MEDIUM | Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host |
| CVE-2026-105452 | 5.9 MEDIUM | Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hos |
IV. Related Vulnerabilities
Same product: Docker Sandboxes
-
CVE-2026-105452
Docker Sandboxes egress proxy could forward unrecognized cli -
CVE-2026-105570
Docker Sandboxes OAuth response masking could be bypassed wi -
CVE-2026-79994
Docker Sandboxes UDS forwarder can reach arbitrary host Unix -
CVE-2026-77179
Docker Sandboxes guest can write arbitrary macOS host files -
CVE-2026-18171
Docker Sandboxes read-only runtime mount writable through it
Same vendor: Docker
-
CVE-2026-106581
Docker Desktop for Windows installer failed to verify extern -
CVE-2026-105452
Docker Sandboxes egress proxy could forward unrecognized cli -
CVE-2026-105570
Docker Sandboxes OAuth response masking could be bypassed wi -
CVE-2026-92543
Docker Engine insecure-registry fallback via malicious DNS r -
CVE-2026-92542
Blind VXLAN injection into encrypted overlay networks from c
Same weakness: CWE-636
-
CVE-2026-78022
Dell Secure Connect Gateway <5.34.00.16 保护机制绕过漏洞 -
CVE-2026-107735
SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permi -
CVE-2026-107584
Not Failing Securely ('Failing Open') in hMailServer -
CVE-2026-107314
pgjdbc does not enforce requireAuth when the value excludes -
CVE-2026-103510
Authentication bypass via blank auth token in P4Search
V. Comments for CVE-2026-101998
No comments yet