by Kastro
Paper/Archive/CVE-2026-77179

CVE-2026-77179

Docker Docker Sandboxes — Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

EPSS 0.2%CVSS 9.4
critical.is priorityof 100
30
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 9.7.097 × 201.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.

Affected

ProductAffectedFixed inSource
Docker Sandboxes0.28.0 – < 0.42.00.42.0CNA

Scores by source

Docker (CNA)9.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdocs.docker.com/ai/sandboxesrefdocs.docker.com/ai/sandboxes/security/isolationrefgithub.com/docker/sbx-releases/releases/tag/v0.42.0