security_identifier

CVE-2026-79994

Identifier for a high-severity flaw in the Docker Sandboxes socket relay, where a symlink swapped in between the path check and the connection let a guest reach AF_UNIX sockets outside its workspace.

Current clusters

security1 publisher

CVE-2026-77179 let sandboxed agent code write anywhere the macOS host account could

Docker shipped the fix in Sandboxes 0.42.0 on September 7 and published the advisory on September 15. Every macOS build from 0.28.0 through 0.41.x is affected, and the default mount is the current directory, read-write.

Publishers:thehackernews.com

Reality

Evidence70
Adoption: Insufficient
Hype gap0
Incentives65
Confidence63