Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace

What to know

What it is

Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace a workspace symlink so that a later user-initiated copy reads a host file outside the workspace into the sandbox or writes sandbox-controlled data to a host path outside the workspace with t…

Affected

See advisory

Fix

Apply the vendor's security update; see the linked advisory.

Exploitation

No known exploitation