Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #3

Docker Sandboxes flaw lets malicious containers escape workspace

Original: CVE-2026-103916: A flaw in Docker Sandboxes lets a malicious sandbox use workspace symlinks so a user-initiated copy rea

A security vulnerability tracked as CVE-2026-103916 affects Docker Sandboxes: a malicious sandbox can use workspace symlinks so that a user-initiated copy reads or writes files on the host outside the workspace. Versions 0.28.0 through before 0.51.0 are affected. No exploitation in the wild has been confirmed, and the fix is to upgrade to version 0.51.0 or later.

Why now: Newly disclosed container escape vulnerability affecting widely used Docker tooling, prompting users to check and update their versions.

DockerCVE-2026-103916

Open on mastodon →

Evidence

• CVE-2026-103916: A flaw in Docker Sandboxes lets a malicious sandbox use workspace symlinks so a user-initiated copy reads or writes host files outside the workspace. Versions 0.28.0 to before 0.51.0 are affected. No in-the-wild exploitation is confirmed. Fix: upgrade to 0.51.0… · suriq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4765196