---
id: CVE-2026-109441
title: >-
  LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker
  Bridge
summary: >-
  LangAlpha through 2026.09.07 contains an improper isolation vulnerability that
  places all tenants' sandbox containers on Docker's shared default bridge
  network with inter-container communication enabled. Authenticated users with
  code exe…
severity: medium
cvss: 5.8
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-653
vendor: ginlix-ai
product: LangAlpha
affected:
  - LangAlpha <= 2026.09.07
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T00:46:06.033Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-109441'
references:
  - url: 'https://www.lasso.security/vulnerability-database/cve-2026-109441'
    label: Lasso.security Advisory
  - url: >-
      https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/config/core.py#L295
  - url: >-
      https://www.vulncheck.com/advisories/langalpha-through-2026.09.07-cross-tenant-sandbox-exposure-via-shared-docker-bridge
    label: >-
      VulnCheck Advisory: LangAlpha through 2026.09.07 Cross-Tenant Sandbox
      Exposure via Shared Docker Bridge
tags:
  - cve.org
ingestedAt: '2026-10-20T01:49:42.626Z'
---

## Overview

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenants' containers, bypassing require_workspace_owner checks to read files such as vault secrets from exposed servers.

## Affected

- `LangAlpha <= 2026.09.07`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.