CopyEscape: Taking Over Docker Hosts with docker cp

Imperva Red Team uncovered CVE-2026-17106, a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed that the same CVE also affected sbx cp when copying files out of Docker Sandboxes. A malicious container or sandbox could exploit the copy process to create or overwrite files outside the destination selected by the user, […] The post CopyEscape: Taking Over Docker Hosts with docker cp appeared first on Blog .