Docker Sandboxes host Git can run programs set by a repository
Programs can secretly run on my PC through this AI work isolation tool.
Summary
Docker Sandboxes host-side Git commands do not neutralize repository Git settings, so an attacker who can change a repository's Git configuration can run an external program on the host. Versions from 0.31.0 before 0.50.0 are affected.
Affected when
- attacker can modify the host repository's Git configuration
- repository mounted read-write in a direct-mode sandbox
What to do
Update Docker Sandboxes to 0.50.0.
Products and platforms
CVE IDs
Sources
- Advisory: github.com (opens in a new tab)
- Write-up: docs.docker.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen