CVE-2026-103916 - Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory
CVE ID :CVE-2026-103916 Published : Nov. 3, 2026, 4:19 p.m. | 45 minutes ago Description :Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace a workspace symlink so that a later user-initiated copy reads a host file...