CVE-2026-109797: Cross-tenant sandbox takeover in SAP/astonish
In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers because of improper tenant isolation in the legacy Incus sandbox-management API handlers. The affected handlers did not use the tenant-aware session lookup path, allowing cross-tenant container operations such as listing, exposing or proxying, and deleting containers.The issue affects only the legacy Incus backend. Kubernetes and OpenShell deployments are not affected because the relevant Incus-specific handlers are unavailable there.
Affected Software
Event History
Frequently Asked Questions
Which deployments need to be assessed for exposure?
Only deployments using the legacy Incus sandbox backend are affected. Kubernetes and OpenShell deployments are not affected because they do not expose the relevant Incus-specific handlers.
What level of access does an attacker need?
An attacker needs authenticated access with low privileges. They could then potentially interact with sandbox containers belonging to another team, including listing, exposing or proxying, or deleting containers.