High [CVE-2026-121614] Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands
This high-severity Docker advisory covers CVE-2026-121614 affecting Docker Sandboxes.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Get an email when Docker Docker Desktop publishes the next one.
See Docker Docker Desktop's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Summary
Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands.
An attacker who can modify a host repository's Git configuration, for example through a direct-mode sandbox with the repository mounted read-write, can configure core.fsmonitor or another Git setting that invokes an external program.
Git can execute the program during a later clone-mode fetch or, starting in version 0.39.0, an sbx kit push initiated by the user. The program runs on the host with the invoking user's permissions, outside the sandbox's microVM isolation.
The read-only host repository mount provided to a clone-mode sandbox does not itself allow that sandbox to modify the host repository's Git configuration. The issue is fixed in version 0.50.0.
- before 0.50.0
Official advisory · high-confidence parse· fetched 1 day ago·verify at source
Mitigation checklist
- An attacker who can modify a host repository's Git configuration, for example through a direct-mode sandbox with the repository mounted read-write, can configure core.fsmonitor or another Git setting that invokes an external program.
Official advisory · high-confidence parse· fetched 1 day ago·verify at source
More Docker advisories
- CVE-2026-103916Nov 3, 2026Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace
- CVE-2026-105452Oct 8, 2026Docker Sandboxes could forward a client-supplied credential alongside a credential
- CVE-2026-101998Oct 8, 2026Docker Sandboxes could fail open while masking credentials in protected proxy responses
- CVE-2026-105570Oct 8, 2026Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding
- CVE-2026-79994Sep 15, 2026The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket
- CVE-2026-77179Sep 15, 2026On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks
Android app · Google Play
Monitor future Docker CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.