# Docker patches sandbox flaw that could expose developers' files

_Published Thursday, November 5, 2026 at 11:36 AM EST · Security · Latest · Tier 2 — Notable_

![Docker patches sandbox flaw that could expose developers' files — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj37A8QMI4tUKrluDLCSgawVjQQeZ6c6NrfWLMLUjrI6vRhpt8Tlw4PNnfF49ZlOTtW28Cfb035jo-j22auCrWauuE-JpHfKMFSVfIQtUZjn1eETLFhQEev0FFafFlGz8W6r-96FPmTWlFGTR3RhV869PbcYkO4YPi5nD-zQVGHSZ8d39OmhecF693dj4-x/s1700-nu-rw-lo-l85-e365/tds.jpg)

Docker Sandboxes version 0.51.0 fixes a vulnerability that could bypass file access restrictions and expose cloud credentials or other sensitive files on a developer's computer, according to Endor Labs. The flaw, CVE-2026-103916, affects the command used to copy files between a sandbox and its host computer.

An agent could place a symbolic link-a shortcut pointing to another file or folder-inside an approved workspace. A subsequent copy command could then access files outside the sandbox's permitted boundaries because the command did not enforce those restrictions.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/threatsday-apache-ofbiz-rce-dreamhost.html)

---
Canonical: https://techandbusiness.org/newswire/FGVFLM0PrQj8HlFR35BJ7j
Published: 2026-11-05T16:36:10.684Z
Story chronology: 2026-11-05T14:41:00.000Z
Retrieved: 2026-11-06T22:51:13.880Z
Publisher: Tech & Business (techandbusiness.org)