CVE-2026-101998
— UNSCOREDPublished 2026-10-08 · Updated 2026-10-08
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.
Weaknesses
CWE-636
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100304PoC
- MEDIUMCVE-2026-100860PoC
- UNSCOREDCVE-2026-103502PoC
- UNSCOREDCVE-2026-103510
- MEDIUMCVE-2026-107314PoC
- HIGHCVE-2026-107584
- UNSCOREDCVE-2026-107735PoC
- HIGHCVE-2026-61595PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.