Threat video1:00
CVE-2026-103916 Docker Sandboxes sbx cp: Detection & IOCs
sbx cp follows symlinks to reach host files; v0.51.0 fixes it. 9 detection rules, 9 IOCs and 8 ATT&CK techniques, plus a free Splunk SPL rule.
Read the full threat intel for CVE-2026-103916 Docker Sandboxes sbx cp: Detection & IOCs →
Chapters
- 0:00The hookSymlinks escape sandbox, read or write host files.
- 0:04The storyDocker's fix for an earlier flaw was incomplete.
- 0:11Attack pathAgent writes a symlink to the workspace.
- 0:27AttributionNo threat actor is attributed.
- 0:32Indicators of compromise8 indicators to hunt: 8 paths.
- 0:38MITRE ATT&CK techniques8 ATT&CK techniques, from initial access to impact.
- 0:43Remediation3 steps now: Upgrade Docker Sandboxes.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Symlinks escape sandbox, read or write host files.
0:05Docker's fix for an earlier flaw was incomplete.
0:08Symlinks still escaped the sandbox.
0:11Agent writes a symlink to the workspace.
0:13Operator runs copy-in on the poisoned path.
0:16Symlink resolves to host credentials or secrets.
0:20File written back outside sandbox to host.
0:22Persists via SSH.
0:27No threat actor is attributed. Confidence: low.
0:328 indicators to hunt: 8 paths.
0:388 ATT&CK techniques, from initial access to impact.
0:433 steps now: Upgrade Docker Sandboxes.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.