Medium severity · published Oct 8, 2026
CVE-2026-101998
Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
5.9
CVSS
0.2%
EPSS
No
On KEV
Description
Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Docker Sandboxes · Docker
0.21.0 before 0.47.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-101998
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-101998
product
https://docs.docker.com/ai/sandboxes/
technical-description
https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works
More from Docker Sandboxes
9.4
CVE-2026-77179
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
8.7
CVE-2026-79994
Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
7.1
CVE-2026-17106
Tar extraction in moby/go-archive can write outside the destination directory via link following
6.7
CVE-2026-105570
Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
5.9
CVE-2026-105452
Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts