# CVE-2026-103916

Path-traversal in Docker 'sbx cp' allows sandboxes to read/write host files.

- Page: https://www.vulneraibility.com/cve/CVE-2026-103916
- CVSS: 8.4
- Known exploited: not in CISA KEV as of our last sync
- CISA SSVC: exploitation none, automatable no, technical impact partial (assessed 2026-11-03)
- Weakness: CWE-59
- Published: 2026-11-03

## Affected versions

- Docker Docker Sandboxes: affected >= 0.28.0 and < 0.51.0

A version outside these ranges is not a statement that it is unaffected.

## Impact

Malicious sandbox can swap a workspace symlink to copy host files into the sandbox or write sandbox data to host paths with user permissions.

## Action

Immediate action required

## Recommendation

Upgrade sbx to v0.51.0, audit sandbox activity, rotate exposed credentials.

## References

- [other] https://docs.docker.com/ai/sandboxes/
- [other] https://docs.docker.com/ai/sandboxes/security/isolation/
- [other] https://github.com/docker/sbx-releases/releases/tag/v0.51.0

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.