Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-79994

Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

CVSS 4.0 8.7 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-79994

Published

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-79994

Published

Docker Sandboxes

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "Docker Sandboxes",
                    "vendor": "Docker",
                    "cpes": [
                        "cpe:2.3:a:docker:docker_sandboxes:*:*:*:*:*:*:*:*"
                    ],
                    "versions": [
                        {
                            "version": "0.37.0",
                            "status": "affected",
                            "lessThan": "0.42.0",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON