CVE-2026-105452: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in Docker Docker Sandboxes

Docker Sandboxes forward client-supplied credentials along with credentials injected by the host egress proxy. The proxy removes alternate credentials only when their values match known sentinel values. Untrusted code running in an authorized sandbox can supply an unrecognized credential in another supported authentication header. For affected upstream services, this may authenticate the request to an attacker-controlled account and expose data included in the request.

An attacker controlling untrusted code in an authorized Docker sandbox could supply credentials that bypass the proxy's filtering, potentially authenticating requests as an attacker-controlled account. This leads to exposure of sensitive information included in the request to unauthorized actors.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict untrusted code execution in Docker Sandboxes and monitor for unusual authentication behaviors.