Docker Sandboxes flaw allows local code execution
ZDI rates CVE-2026-121614 at CVSS 7.8; the user must open a malicious file or page.
4 stories, newest first · one card per story
ZDI rates CVE-2026-121614 at CVSS 7.8; the user must open a malicious file or page.

CopyEscape, CVE-2026-17106, lets malicious containers overwrite host files through Docker's archive copy path.

Docker fixed CVE-2026-77179 (CVSS 9.4), a virtio-fs symlink flaw letting code inside macOS Sandboxes VMs read and modify host files; update to 0.42.0.

Canadian Cyber Centre advisory AV26-925 flags a vulnerability in Docker Sandboxes versions prior to 0.43.0 and urges users to apply updates.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views