Vulnerability · Published Sep 15, 2026 · Assigned by Docker
CVE-2026-77179Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
Critical 9.4
In plain English
A critical-severity security flaw in Docker Sandboxes from Docker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Docker | Docker Sandboxes | 0.28.0 – before 0.42.0 |
Weakness: CWE-59 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H