{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-126329","assignerOrgId":"686469e6-3ff6-451b-ab8b-cf5b9e89401e","state":"PUBLISHED","assignerShortName":"Docker","dateReserved":"2026-11-10T20:28:45.078Z","datePublished":"2026-11-12T15:50:44.926Z","dateUpdated":"2026-11-12T15:50:44.926Z"},"containers":{"cna":{"affected":[{"defaultStatus":"unknown","platforms":["MacOS","Linux"],"product":"Docker Sandboxes","vendor":"Docker","versions":[{"version":"0.7.0","status":"affected","lessThan":"0.53.0","versionType":"semver"},{"version":"0.53.0","status":"unaffected","lessThan":"*","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Ryan Selikow"}],"descriptions":[{"lang":"en","value":"Docker Sandboxes reuses existing state and configuration directories without verifying their ownership. If sbx or sandboxd is run as root with HOME or, on Linux, XDG_STATE_HOME pointing to an attacker-controlled location, a local unprivileged user can substitute control-plane sockets and configuration trusted by the root process, potentially executing commands as root. Exploitation requires a privileged invocation with an attacker-influenced environment. The issue affects Linux and macOS and is fixed in version 0.53.0."}],"metrics":[{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE"},"format":"CVSS","scenarios":[{"lang":"en","value":"A local unprivileged attacker controls a state or configuration directory reused by a root invocation with an attacker-influenced HOME or XDG_STATE_HOME."}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-282","description":"CWE-282: Improper Ownership Management","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"686469e6-3ff6-451b-ab8b-cf5b9e89401e","shortName":"Docker","dateUpdated":"2026-11-12T15:50:44.926Z"},"references":[{"tags":["product"],"url":"https://docs.docker.com/ai/sandboxes/"}],"source":{"discovery":"EXTERNAL"},"title":"Docker Sandboxes privilege escalation through untrusted state directories","solutions":[{"lang":"en","value":"Upgrade Docker Sandboxes to version 0.53.0 or later."}],"workarounds":[{"lang":"en","value":"Avoid running sbx or sandboxd as root. If a privileged invocation is required, use HOME and XDG_STATE_HOME values belonging to the target account and ensure its state and configuration directories are not controlled by another user."}]}}}