Security
CVE-2026-46703: Malicious DockerHub Images Can Write Arbitrary Files to Your Host via Boxlite
A symlink-traversal flaw in Boxlite lets attackers craft malicious OCI images on DockerHub to escape sandbox boundaries and write arbitrary files to the host. Image trust is not transitive.
May 22, 2026Verified