Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-105452— Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Quick assessment

Affected

Docker Docker Sandboxes

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Docker 沙箱可能会将客户端提供的凭据与主机出口代理注入的凭据一并转发。由于代理仅在备用凭据的值与已知哨兵值匹配时才移除它们，因此经过授权的沙箱中的不受信任代码可以在其他支持的身份验证头部中提供无法识别的凭据。对于受影响的上游服务，这可能导致请求被认证为攻击者控制的账户，并暴露请求中包含的数据。

CVSS 5.9 · Medium Updated Oct 09, 2026

Possible ATT&CK Techniques 3 AI

T1078 · Valid Accounts T1190 · Exploit Public-Facing Application T1528 · Steal Application Access Token

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Docker	Docker Sandboxes	`0.21.0< 0.43.0`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Source: CVE Program / CVE List V5

Vulnerability Description

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

信息暴露

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Docker	Docker Sandboxes	0.21.0 ~ 0.43.0	`cpe:2.3:a:docker:docker_sandboxes::::::::`

II. Public POCs for CVE-2026-105452

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-105452

请登录查看更多情报信息。

Vendor Pages for CVE-2026-105452 (1)

🔗 Docker Sandboxes | Docker Docs product

Other References for CVE-2026-105452 (1)

https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works technical-description

https://www.cve.org/CVERecord?id=CVE-2026-105452

Same Patch Batch · Docker · 2026-10-08 · 3 CVEs total

CVE-2026-105570	6.7 MEDIUM	Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
CVE-2026-101998	5.9 MEDIUM	Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials

IV. Related Vulnerabilities

Same product: Docker Sandboxes

Same vendor: Docker

Same weakness: CWE-200

V. Comments for CVE-2026-105452

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-105452— Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

Quick assessment

Possible ATT&CK Techniques 3 AI

Affected Version Matrix 1

I. Basic Information for CVE-2026-105452

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-105452

III. Intelligence Information for CVE-2026-105452

Vendor Pages for CVE-2026-105452 (1)

Other References for CVE-2026-105452 (1)

Same Patch Batch · Docker · 2026-10-08 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-105452

Leave a comment