CVE-2026-101998CWE-636

CVE-2026-101998

published October 8, 2026

CVSS
5.9
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.

The record
Technical detail
CVSS
5.9 · NONE
CVSS v4.0
5.9 · CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-636 · Not Failing Securely ('Failing Open')
Published
2026-10-08T23:16Z
References (2)
https://docs.docker.com/ai/sandboxes/ · [email protected]https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works · [email protected]
EPSS history
Timeline
  • 10 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 08 OCT 18:47Z
    Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
    cvelistv5
  • 08 OCT 18:47Z
    Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
    cvelistv5