As cited
Copy frozen at (site build).
vulnerabilities
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
A critical vulnerability in Docker Sandboxes for macOS (CVE-2026-77179) allows malicious code running inside a virtual machine to escape the shared project directory and read or modify files elsewhere on the host system. The exploitation occurs with the privileges of the host account running the virtual machine. Docker issued a security announcement on September 15 to disclose the flaw.
Why it matters: macOS developers and organizations using Docker Sandboxes must immediately patch or restrict usage of affected versions, as untrusted container code can now access sensitive host files and compromise the development environment.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
A critical vulnerability in Docker Sandboxes on macOS allows malicious code within a virtual machine to escape the project directory and read or modify arbitrary files on the host system with the privileges of the account running the virtual machine. Docker disclosed CVE-2026-77179 on September 15, and the flaw carries a CVSS score of 9.4.
Why it matters: macOS users running Docker Sandboxes with untrusted code or containers face immediate risk of host file compromise; patching or upgrading Docker Sandboxes should be prioritized.
- Source published
- First seen by Cybersecurity Tracker