Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Docker Sandboxes ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmaßnahmen zu umgehen.
Product
Docker-Sandboxes betreiben KI-Codierungsagenten in isolierten MicroVM-Sandboxes.
Vulnerabilities 2
-
Critical 9.4CVE-2026-77179 Public exploit
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbit…
-
High 8.7
Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation a…
Revision history
-
#1
Initiale Fassung
References
-
Docker Sandboxes 0.42.0 Security Update vom 2026-09-20
https://docs.docker.com/security/security-announcements/#docker-sandboxes-0420-security-update-cve-2026-77179-and-cve-2026-79994
-
Docker Sandbox Release 0.42.0 vom 2026-09-20
https://github.com/docker/sbx-releases/releases/tag/v0.42.0