# CVE-2026-105452: Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts

> CVE-2026-105452: Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts. CVSS 5.9 (CVSS 4.0).

Canonical: https://rewindex.com/cve/CVE-2026-105452
Last updated: 2026-10-08T20:46:35Z

- Published: 2026-10-08 18:49 UTC · Updated: 2026-10-08 20:46 UTC · Assigner: Docker
- CVSS: 5.9 (CVSS 4.0) · Severity: Medium
- EPSS: 0.14%, 4th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-200

## Description

Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.

## Affected vendors and products

- Docker: Docker Sandboxes

## Tracked companies

- [Docker](https://rewindex.com/company/docker.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-105452)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-105452)
- [https://docs.docker.com/ai/sandboxes/](https://docs.docker.com/ai/sandboxes/)
- [https://docs.docker.com/ai/sandboxes/configuration/credentials/\#how-credential-injection-works](https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-105452 · Markdown: https://rewindex.com/cve/CVE-2026-105452.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-105452 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:13:15.701Z