Docker Sandboxes sbx cp symlink escape reaches host files
Files on your PC can leak or get changed through an AI sandbox tool.
Summary
Docker Sandboxes' sbx cp command does not stop workspace symbolic links from pointing outside the shared workspace. A malicious sandbox can use this to read or write host files outside the workspace with the invoking user's permissions. Versions from 0.28.0 up to, but not including, 0.51.0 are affected.
What to do
Update to 0.51.0 or later.
Products and platforms
CVE IDs
Sources
- Advisory: github.com (opens in a new tab)
- Write-up: docs.docker.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen