CVE-2026-799948.7HighCWE-367
Docker Sandboxes vulnerability
Docker · Docker Sandboxes
Not in CISA KEVVendor fix available
0.1%probability of exploitation in the next 30 days
3rd percentile
050100
Higher than 3% of scored CVEs
8.7HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 17 Sep.
- Docker Fixes Critical Sandbox Flaws Allowing Host File Writes and Socket AccessSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.