Critical
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
Type: advisorySources: OSV
On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-77179
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 10:53 UTC · Revision 1
Source evidence
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
core-osv · Original sourcePublished 15 Sept 2026, 13:32 UTC
On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.
osv:CVE-2026-77179
Complete source record
{
"id": "0108352eaee95db993659bddf32d367b210c79ec424f2dca6cdfcc77dff3f941",
"url": "https://osv.dev/vulnerability/CVE-2026-77179",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback",
"summary": "On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.",
"evidence": "osv:CVE-2026-77179",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2026-77179",
"aliases": [
"CVE-2026-77179"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/docker/sbx-releases",
"type": "GIT",
"events": [
{
"introduced": "4a0fbcf0599c8d81714500242eed24fcdce24c55"
},
{
"fixed": "bdfd32bd69bb084959b5f4779310bff21d95bb62"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0.28.0"
},
{
"fixed": "0.42.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"range": [
{
"fixed": "bdfd32bd69bb084959b5f4779310bff21d95bb62"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v0.42.0"
}
]
}
}
],
"versions": [
"v0.39.0-rc3",
"v0.38.0-rc4",
"v0.38.0-rc3",
"v0.38.0-rc2",
"v0.38.0-rc1",
"v0.38.0",
"v0.37.1",
"v0.37.0-rc4",
"v0.37.0-rc3",
"v0.37.0-rc2",
"v0.37.0-rc1",
"v0.37.0",
"v0.36.0-rc1",
"v0.35.0-rc3",
"v0.35.0-rc2",
"v0.35.0-rc1",
"v0.35.0",
"v0.34.0-rc3",
"v0.34.0",
"v0.33.0-rc4",
"v0.33.0-rc3",
"v0.33.0-rc2",
"v0.33.0-rc1",
"v0.33.0",
"v0.32.0-rc1",
"v0.32.0",
"v0.31.3-rc1",
"v0.31.3-rc.cloud1",
"v0.31.3",
"v0.31.2-rc1",
"v0.31.2",
"v0.31.1",
"v0.31.0-rc5",
"v0.31.0-rc4",
"v0.31.0-rc3",
"v0.31.0-rc2",
"v0.31.0",
"nightly-202608121104-89ca6d4",
"nightly-202608120639-63a9f70",
"nightly",
"dev-fce4efc",
"dev-fca8c62",
"dev-fb4d881",
"dev-f876ac1",
"dev-ecf06ff",
"dev-e59c912",
"dev-e24ee78",
"dev-e0206e3",
"dev-db9ab5e",
"dev-d3b51ba",
"dev-cf3aefc",
"dev-c403eab",
"dev-c3b5df8",
"dev-c1c4294",
"dev-b98b0d2",
"dev-a87b636",
"dev-a5e90ab",
"dev-a1e6548",
"dev-8cb6035",
"dev-7ff7ed3",
"dev-7348d77",
"dev-71807af",
"dev-6ee1432",
"dev-6e7b804",
"dev-618cd2d",
"dev-5fbe85a",
"dev-5c8bb9b",
"dev-5b83c27",
"dev-577d7b7",
"dev-4e29266",
"dev-4a858f0",
"dev-48a0c6f",
"dev-454ec6f",
"dev-43f95b2",
"dev-3371712",
"dev-2f5b337",
"dev-2c6c51b",
"dev-28b7fe7",
"dev-228b4d1",
"dev-1db310e",
"dev-1aa36bc",
"dev-16a33ce",
"dev-15ee692",
"dev-150e25f",
"dev-115fb8a",
"dev-1018f9a",
"dev-0f7cf24",
"dev-0c6b966",
"dev-021a5cd",
"v0.31.0-rc1",
"v0.30.0-rc2",
"v0.30.0-rc1",
"v0.30.0",
"v0.29.0-rc1",
"v0.29.0",
"v0.28.3",
"v0.28.2",
"v0.28.1-rc2",
"v0.28.1",
"v0.28.0",
"v0.27.0",
"v0.26.1",
"v0.25.0",
"dev-ebc3fbe",
"dev-e54ee33",
"dev-dc73246",
"dev-c7702ef",
"dev-c13a59d",
"dev-bad9503",
"dev-ad0ca5e",
"dev-a5207e0",
"dev-921c1c7",
"dev-8fc2763",
"dev-793e764",
"dev-78ed158",
"dev-438ebd7",
"dev-2631810",
"dev-1f51dc0",
"dev-02f174c"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-77179.json"
}
}
],
"modified": "2026-10-28T02:30:28.287819135Z",
"provider": "osv",
"references": [
"https://docs.docker.com/ai/sandboxes/",
"https://docs.docker.com/ai/sandboxes/security/isolation/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77179.json",
"https://github.com/docker/sbx-releases/releases/tag/v0.42.0",
"https://nvd.nist.gov/vuln/detail/CVE-2026-77179"
],
"provider_metadata": {
"cwe_ids": [
"CWE-59"
],
"cna_assigner": "Docker",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77179.json"
}
},
"related_cves": [
{
"value": "CVE-2026-77179",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 494738,
"published_at": "2026-09-15T13:32:41.132+00:00"
}