Skip to content
OpenAdvisories

Product · Docker

Docker Sandboxes

11 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-77179 Public exploit

    Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

    On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbit…