security_identifier

CVE-2026-77179

Identifier for a critical flaw in the host-side virtio-fs file sharing of Docker Sandboxes on macOS, where symlink following on reopen let guest code reach host files outside the shared workspace.

Current clusters

security1 publisher

CVE-2026-77179 let sandboxed agent code write anywhere the macOS host account could

Docker shipped the fix in Sandboxes 0.42.0 on September 7 and published the advisory on September 15. Every macOS build from 0.28.0 through 0.41.x is affected, and the default mount is the current directory, read-write.

Publishers:thehackernews.com

Reality

Evidence70
Adoption: Insufficient
Hype gap0
Incentives65
Confidence63