<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: docker-sandboxes</title><description>Every new CVE for docker-sandboxes.</description><link>https://agentprime.io/</link><item><title>CVE-2026-121614: Docker Sandboxes host Git executes repository-controlled programs</title><link>https://agentprime.io/advisories/CVE-2026-121614/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-121614/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 21:54:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103916: Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory</title><link>https://agentprime.io/advisories/CVE-2026-103916/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103916/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 16:19:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105452: Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts</title><link>https://agentprime.io/advisories/CVE-2026-105452/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105452/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 18:49:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101998: Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials</title><link>https://agentprime.io/advisories/CVE-2026-101998/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101998/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 18:47:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105570: Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host</title><link>https://agentprime.io/advisories/CVE-2026-105570/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105570/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 18:46:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79994: Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race</title><link>https://agentprime.io/advisories/CVE-2026-79994/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79994/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 20:33:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77179: Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback</title><link>https://agentprime.io/advisories/CVE-2026-77179/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77179/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 13:32:41 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-18171: Docker Sandboxes read-only runtime mount writable through its shared-export alias</title><link>https://agentprime.io/advisories/CVE-2026-18171/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18171/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 14:47:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12539: Docker Sandboxes ICMP egress restriction bypass after daemon restart</title><link>https://agentprime.io/advisories/CVE-2026-12539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12539/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Jun 2026 13:51:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12039: Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution</title><link>https://agentprime.io/advisories/CVE-2026-12039/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12039/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Jun 2026 13:48:14 GMT</pubDate><category>CVE</category></item></channel></rss>