CVE-2026-126329

Docker Sandboxes reuses existing state and configuration directories without verifying their ownership.

Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointing to an attacker-controlled location, a local unprivileged user can substitute control-plane sockets and configuration trusted by the root process, potentially executing commands as root. Exploitation requires a privileged invocation with an attacker-influenced environment. The issue affects…

12. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-126329