<![CDATA[🔴 Critical: Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files]]>

<![CDATA[🔴 Critical: Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files]]>Docker has disclosed a critical vulnerability in Docker Sandboxes on macOS that allows malicious code running inside the sandboxed virtual machine to break out of the shared project directory and access the wider host filesystem.

According to Docker's security announcement on September 15, code executing inside the sandbox can escape the project directory that is shared into the VM and then read or modify files anywhere else on the host. The escaped code operates with the privileges of the host account that launched the virtual machine, meaning the impact is limited only by what that user account is permitted to do.

The flaw is tracked as CVE-2026-77179 and carries a Critical severity rating. Affected versions were noted in the advisory, so users should check their installed release against Docker's guidance.

Mitigation steps:

Review Docker's security announcement for the list of affected versions.
Update Docker Sandboxes to a patched release as soon as one is available.
Avoid running untrusted or malicious code inside a sandbox on an unpatched installation.
Where patching is not immediately possible, limit the host privileges of the account used to run the virtual machine and restrict what is shared into the sandbox.

Source: The Hacker News

Are you running Docker Sandboxes on macOS, and have you already checked whether your version is affected?

]]>https://xploitlk.com/topic/398/critical-critical-docker-sandboxes-flaw-lets-malicious-guest-code-read-and-modify-macos-host-filesRSS for NodeTue, 27 Oct 2026 11:22:27 GMTSun, 20 Sep 2026 04:30:22 GMT60