Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-17 15:37 UTC
  • Importiert: 2026-09-23 11:49 UTC
  • CVSS: 9.4
  • Quelle-ID: thn_global
  • uid_hash: c4e55353aa499ef29925caf168df032bb4ec10f45ce8c1c8b48110b58f271214
The Hacker News

Inhalt

Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15.

The escape runs with the rights of the host account that runs the virtual machine. The flaw, CVE-2026-77179, is rated Critical, affects versions

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-77179

CRITICAL

9.4

CRITICAL

9.4

2026-09-15

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste