diff --git a/Dockerfile.base b/Dockerfile.base
index 3fd658485..eb0bb9880 100644
--- a/Dockerfile.base
+++ b/Dockerfile.base
@@ -62,7 +62,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
         iproute2=6.1.0-3 \
         iptables=1.8.9-2 \
         libcap2-bin=1:2.66-4+deb12u2+b2 \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    # Create python -> python3 symlink so scripts using the bare `python`
+    # command work inside the sandbox without additional setup. (#1452)
+    && ln -s /usr/bin/python3 /usr/local/bin/python
 
 # gosu for privilege separation (gateway vs sandbox user).
 # Install from GitHub release with checksum verification instead of