---
id: CVE-2026-105570
title: >-
  Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when
  deciding whether to mask managed credential responses, while request routing
  treated DNS hostnames case-insensitively
summary: >-
  Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when
  deciding whether to mask managed credential responses, while request routing
  treated DNS hostnames case-insensitively. Untrusted code inside a sandbox
  could u…
severity: medium
cwe:
  - CWE-178
published: '2026-10-08'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T20:46:35.260'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-105570'
references:
  - url: 'https://docs.docker.com/ai/sandboxes/'
    label: security@docker.com
  - url: >-
      https://docs.docker.com/ai/sandboxes/configuration/credentials/#how-credential-injection-works
    label: security@docker.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-08T20:06:22.181Z'
epss: 0.00127
epssPercentile: 0.02348
vendor: Docker
product: Docker Sandboxes
affected:
  - sandboxes >= 0.21.0 < 0.47.0
cvss: 6.7
cvssVector: 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-08T19:28:07.889305Z'
cvssSource: cna
---

## Overview

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider's access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.