Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Summary: Docker disclosed on September 15 that malicious code inside a Docker Sandboxes virtual machine on macOS could escape the shared project directory and read or modify files anywhere on the host with the rights of the account running the VM, tracked as CVE-2026-77179 and rated Critical. The flaw affects versions 0.28.0 through 0.41.x on macOS, was fixed in 0.42.0 on September 7, and works by replacing a parent directory with a symlink that the virtio-fs host server followed when reopening a removed file, which Docker said could lead to code execution on the host.
Bottom line: The sandbox exists precisely to contain what an AI coding agent installs and runs with sudo, and Docker's own documentation states the hypervisor boundary is the isolation control; a guest that can rewrite host files as the VMM user defeats that boundary. Docker reports no exploitation and CISA lists none, but the fix shipped eight days before the advisory and the 0.42.0 release notes do not name either CVE.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-77179CVE-2026-79994
- Related
- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats Cyber Risks ·⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, Click Fix Attacks, Click Fix Surge, and Browser Hijacks Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026