Docker Sandboxes versions from 0.31.0 up to but not including 0.50.0 contain a vulnerability where repository-controlled Git configurations are not neutralized during certain host-side Git commands. This allows an attacker who can modify a host repository's Git configuration to execute arbitrary programs on the host with the invoking user's permissions, bypassing the sandbox isolation. The issue is fixed in version 0.50.0.