Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Docker warned of a critical security flaw in Docker Sandboxes for macOS, identified as CVE-2026-77179, disclosed on September 15, 2026. According to the advisory, malicious code running inside a Docker Sandboxes virtual machine can escape the project directory that is shared into the VM and read or change files anywhere else on the host machine. The escape executes with the privileges of the host account that runs the virtual machine, potentially granting attackers broad access to the host filesystem.

The vulnerability affects Docker Sandboxes versions released before the patched update. Docker has released security updates to remediate the flaw. Users are advised to update Docker Desktop and Docker Sandboxes to the latest available versions to mitigate the risk. As of the announcement, no public exploitation details have been confirmed, though the vulnerability enables escape from the sandboxed environment into the host filesystem.