CVE-2026-103916 is a vulnerability in Docker Sandboxes' sbx cp command where host-side paths are not properly confined to a shared workspace. This flaw allows a malicious sandbox to manipulate workspace symlinks, enabling unauthorized reading of host files into the sandbox or writing sandbox-controlled data to host paths outside the workspace with the invoking user's permissions.