{"data":{"id":"e9e69b0c-f9ed-435c-ad64-59a4db71f074","title":"Docker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor Labs","summary":"Endor Labs researchers found a vulnerability (CVE-2026-103916) in Docker Sandboxes, the isolation tool for AI coding agents. The sbx cp copy command does not enforce the sandbox's approved folder restrictions, and an agent can use a symbolic link inside an approved workspace to reach files outside the sandbox, including cloud credentials and SSH keys. The flaw is rated High (CVSS 3.1 8.2, CVSS 4.0 7.3) and is classified as CWE-59.","solution":"Fixed in Docker Sandboxes v0.51.0, released November 3, 2026. Users should upgrade as soon as the update is available.","labels":["security"],"sourceUrl":"https://www.endorlabs.com/learn/docker-sandboxes-vulnerability-lets-ai-agents-access-sensitive-files-outside-their-sandbox-cve-2026-103916","publishedAt":"2026-11-03T21:01:22.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Docker Sandboxes","Claude Code","Codex","Gemini CLI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-03T21:01:22.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}