CVE-2026-121614

The record

Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands. An attacker who can modify a host repository's Git configuration, for example through a direct-mode sandbox with the repository mounted read-write, can configure core.fsmonitor or another Git setting that invokes an external program. Git can execute the program during a later clone-mode fetch or, starting in version 0.39.0, an sbx kit push initiated by the user. The program runs on the host with the invoking user's permissions, outside the sandbox's microVM isolation. The read-only host repository mount provided to a clone-mode sandbox does not itself allow that sandbox to modify the host repository's Git configuration. The issue is fixed in version 0.50.0.

Affected packages

Related vulnerabilities

• CVE-2026-121427 AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT… CWE-15
• CVE-2026-73027 External control of system or configuration setting in Windows Setup Files Cleanup allows… CWE-15
• CVE-2026-107818 MariaDB server is a community developed fork of MySQL server. CWE-15
• CVE-2026-87987 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CWE-15
• CVE-2026-85217 A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can… CWE-15
• CVE-2026-19592 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS… CWE-15
• CVE-2026-16708 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive… CWE-15
• CVE-2026-19884 In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source… CWE-15