LangAlpha before 2026.09.07 uses Docker’s default shared bridge network for all tenant sandbox containers. Because inter-container communication is enabled, an authenticated user who can execute code in his own sandbox can reach other tenants’ containers. This flaw allows bypassing required ownership checks and reading sensitive files, such as vault secrets, from exposed servers. The vulnerability represents a classic authority conflict (CWE‑653) that compromises the confidentiality of data stored by other tenants.

The affected product is ginlix‑ai:LangAlpha, with all releases up to and including version 2026.09.07 vulnerable. Containers deployed in this environment are subject to the shared network isolation flaw.

The CVSS score of 6.9 denotes moderate severity. EPSS is not available, and the vulnerability is not listed in CISA’s KEV catalog. Attack requires an authenticated user who already has code execution privileges within their own sandbox. An attacker can exploit this by connecting to peer containers over the shared bridge, therefore the risk is internal but significant, given the potential to exfiltrate confidential data from other tenants’ sandboxes. Mitigation is recommended as a priority to prevent cross‑tenant data exposure.