Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

A critical vulnerability in Docker Sandboxes on macOS allows malicious code to escape the shared project directory and access files elsewhere on the host system. The escaped code runs with the same privileges as the host account that launched the virtual machine, enabling it to read or modify files. This flaw is rated Critical and has been assigned the identifier CVE-2026-77179. Docker has issued a security announcement regarding this issue, which affects certain versions of the software. The vulnerability poses a significant risk to the security of the host system. Docker's security announcement was made on September 15.