🔴 Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files

Docker has released security fixes for two serious vulnerabilities in Docker Sandboxes that could let a malicious guest environment bypass workspace isolation and access sensitive resources on the host.

These flaws, identified as CVE-2026-77179 and CVE-2026-79994, were addressed in Docker Sandboxes version 0.42.0, which was released on September 7.

Docker Sandboxes isolate development agents and workloads while selectively sharing a host workspace. Both vulnerabilities arise from improper handling of pathnames after an authorization decision: a compromised sandbox could exploit symbolic links to alter a directory path between the validation and subsequent host-side access.