Reported by 6 outlets

Timeline

1. original reporting

   Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulne

   securityonline.info · 27d ago · September 17th, 2026

   Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulne

   via Mastodon https://securityonline.info/docker-sandboxes-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

2. update from gbhackers.com

   Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files

   gbhackers.com · 26d ago · September 17th, 2026

   Docker has released security fixes for two serious vulnerabilities in Docker Sandboxes that could let a malicious guest environment bypass workspace isolation and access sensitive resources on the host. These flaws, identified as CVE-2026-77179 and CVE-2026-79994, were addressed in Docker Sandboxes version 0.42.0, which was released on September 7. Docker Sandboxes isolate development agents and […] The post Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

3. update from cyberpress.org

   Critical Docker Sandboxes Flaw Lets Malicious Guests Escape Isolation and Access Host Files

   cyberpress.org · 26d ago · September 17th, 2026

   Docker Sandboxes isolate development agents, automated workflows, and untrusted workloads while allowing selective access to a host workspace. Critical Docker Sandboxes Flaw However, both newly disclosed issues stem from a time-of-check-to-time-of-use (TOCTOU) weakness involving filesystem path validation. In both cases, Docker Sandboxes validated that a requested pathname belonged to an approved shared workspace. A malicious process inside the sandbox could then alter part of that path, such as by replacing a directory with a symbolic link, before the host performed the subsequent file or socket operation. CVE-2026-77179 is the most severe issue and carries a Critical severity rating. It affects Docker Sandboxes versions 0.28.0 through versions prior to 0.42.0 on macOS. The vulnerability exists in the macOS virtio-fs host server, which could incorrectly follow symbolic links when reopening an unlinked file using a previously stored path. An attacker controlling code within a guest sandbox could race the host operation by replacing a parent directory after the original path had passed authorization checks. This could redirect a host-side file operat

4. mentioned by thecybersecguru.com

   🚨 Docker Sandboxes escape vulnerabilities Two flaws could allow malicious code running inside a Docker Sandbox to break out of the microVM i

   thecybersecguru.com · 25d ago · September 18th, 2026

5. update from thehackernews.com

   🤖 CVE-2026-77179 (Critical): Docker Desktop sandbox escape on macOS. Malicious guest code can read and modify host files outside the shared

   thehackernews.com · 25d ago · September 18th, 2026

   Malicious guest code can read and modify host files outside the shared

   via Mastodon https://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.html

6. update from accomplish.ai

   CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes)

   accomplish.ai · 24d ago · September 19th, 2026

   submitted by /u/natcoba [link] [comments]

   via reddit r/cybersecurity: CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes)