Docker Sandboxes flaw allows local code execution
ZDI rates CVE-2026-121614 at CVSS 7.8; the user must open a malicious file or page.
46
Product
Docker Sandboxes
- Mentions · 7d1
- Mentions · 30d1
- All mentions5
- First seenSep 17, 2026
- Last mentioned3d ago
Timeline
5 articles · newest firstCopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access
CopyEscape, CVE-2026-17106, lets malicious containers overwrite host files through Docker's archive copy path.
62
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Docker fixed CVE-2026-77179 (CVSS 9.4), a virtio-fs symlink flaw letting code inside macOS Sandboxes VMs read and modify host files; update to 0.42.0.
56
Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM Workspaces
Docker patched two sandbox-escape flaws, CVE-2026-77179 and CVE-2026-79994, letting malicious guest workloads access host files and sockets.
62
Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files
Docker fixed two symlink-race flaws in Docker Sandboxes, CVE-2026-77179 and CVE-2026-79994, letting malicious guests escape the workspace and read host files; fixed in 0.42.0.
55
Related CVEs
by mentions- CVE-2026-77179<1%9.4Symlink Escape in Docker Sandboxes virtio-fs Exposes macOS Host Files
- TOCTOU Symlink Race in Docker Sandboxes Socket Relay Exposes Host Sockets
- CVE-2026-17106<1%7.1Path Traversal via Link Following in Moby go-archive Tar Extraction
- CVE-2026-5817<1%8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without…
- CVE-2026-5843<1%8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model…
- CVE-2026-28400<1%7.5Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker
- External command execution via Git config in Docker Sandboxes before 0.50.0
- CVE-2026-2664<1%6.8An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0…
- CVE-2026-33990<1%6.8Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker
Appears with
- Dockervendor · 5
- Docker Desktopproduct · 3
- Dockerorganization · 2
- Docker Engineproduct · 1
- accompl.aiorganization · 1
- CISAvendor · 1
- virtio-fsproduct · 1
- Zero Day Initiativeorganization · 1
- Docker CLIproduct · 1
- runcproduct · 1
- Impervaorganization · 1
- Docker Model Runnerproduct · 1
- Cyera Research Labsorganization · 1
- ThreatNotifyorganization · 1
- moby/go-archiveproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.