Critical severityNVD Advisory· Published Sep 15, 2026· Updated Sep 16, 2026
CVE-2026-77179
CVE-2026-77179
Description
On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: <0.42.0
Patches
Vulnerability mechanics
References
3News mentions
4- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More ThreatsThe Hacker News · Sep 28, 2026
- ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser HijacksThe Hacker News · Sep 21, 2026
- Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host FilesThe Hacker News · Sep 17, 2026
- Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM WorkspacesCyber Security News · Sep 17, 2026