Vulnerability in Docker Sandboxes
CVE-2026-79994
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.
Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (3.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 3rd percentile — 3.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
Weakness classification (CWE)
References
- docs.docker.com/ai/sandboxes/ (product)
- docs.docker.com/ai/sandboxes/security/isolation/ (product)
- github.com/docker/sailor/pull/2021 (patch)
- github.com/docker/sandboxes/pull/5342 (patch)
- github.com/docker/sbx-releases/releases/tag/v0.41.0 (release-notes)
- github.com/docker/sbx-releases/releases/tag/v0.42.0 (release-notes)