CVE-2026-101998: CWE-636: Not Failing Securely ('Failing Open') in Docker Docker Sandboxes

This vulnerability (CWE-636) in Docker Sandboxes involves improper failure handling ('failing open') during response processing. When a response-body read operation returns both data and an error, the sandbox handlers may inadvertently forward unmasked sensitive information. This can lead to unauthorized recovery of sensitive credentials such as OAuth tokens and API keys by code running inside the sandbox environment. The affected Docker versions are from 0.21.0 up to but not including 0.47.0. The CVSS 4.0 base score is 5.9, indicating medium severity with attack vector being adjacent network and requiring low attack complexity and partial privileges.

An attacker with code execution inside an authorized Docker sandbox could exploit this vulnerability to obtain sensitive host-managed credentials, including OAuth access and refresh tokens and Anthropic API keys. This exposure compromises the confidentiality of these credentials, potentially allowing unauthorized access to protected resources or APIs that rely on these tokens. There is no indication of active exploitation in the wild.

No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the Docker vendor advisory for current remediation guidance. Until a fix is available, restrict code execution privileges inside Docker sandboxes and monitor for suspicious activity related to credential access.