{"id":"CVE-2026-77179","summary":"Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback","details":"On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.","modified":"2026-09-18T03:30:32.735642957Z","published":"2026-09-15T13:32:41.132Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77179.json","cna_assigner":"Docker","cwe_ids":["CWE-59"]},"references":[{"type":"WEB","url":"https://docs.docker.com/ai/sandboxes/"},{"type":"WEB","url":"https://docs.docker.com/ai/sandboxes/security/isolation/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77179.json"},{"type":"ADVISORY","url":"https://github.com/docker/sbx-releases/releases/tag/v0.42.0"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77179"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/docker/sbx-releases","events":[{"introduced":"4a0fbcf0599c8d81714500242eed24fcdce24c55"},{"fixed":"bdfd32bd69bb084959b5f4779310bff21d95bb62"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0.28.0"},{"fixed":"0.42.0"}]}}],"versions":["v0.39.0-rc3","v0.38.0-rc4","v0.38.0-rc3","v0.38.0-rc2","v0.38.0-rc1","v0.38.0","v0.37.1","v0.37.0-rc4","v0.37.0-rc3","v0.37.0-rc2","v0.37.0-rc1","v0.37.0","v0.36.0-rc1","v0.35.0-rc3","v0.35.0-rc2","v0.35.0-rc1","v0.35.0","v0.34.0-rc3","v0.34.0","v0.33.0-rc4","v0.33.0-rc3","v0.33.0-rc2","v0.33.0-rc1","v0.33.0","v0.32.0-rc1","v0.32.0","v0.31.3-rc1","v0.31.3-rc.cloud1","v0.31.3","v0.31.2-rc1","v0.31.2","v0.31.1","v0.31.0-rc5","v0.31.0-rc4","v0.31.0-rc3","v0.31.0-rc2","v0.31.0","nightly-202608121104-89ca6d4","nightly-202608120639-63a9f70","nightly","dev-fce4efc","dev-fca8c62","dev-fb4d881","dev-f876ac1","dev-ecf06ff","dev-e59c912","dev-e24ee78","dev-e0206e3","dev-db9ab5e","dev-d3b51ba","dev-cf3aefc","dev-c403eab","dev-c3b5df8","dev-c1c4294","dev-b98b0d2","dev-a87b636","dev-a5e90ab","dev-a1e6548","dev-8cb6035","dev-7ff7ed3","dev-7348d77","dev-71807af","dev-6ee1432","dev-6e7b804","dev-618cd2d","dev-5fbe85a","dev-5c8bb9b","dev-5b83c27","dev-577d7b7","dev-4e29266","dev-4a858f0","dev-48a0c6f","dev-454ec6f","dev-43f95b2","dev-3371712","dev-2f5b337","dev-2c6c51b","dev-28b7fe7","dev-228b4d1","dev-1db310e","dev-1aa36bc","dev-16a33ce","dev-15ee692","dev-150e25f","dev-115fb8a","dev-1018f9a","dev-0f7cf24","dev-0c6b966","dev-021a5cd","v0.31.0-rc1","v0.30.0-rc2","v0.30.0-rc1","v0.30.0","v0.29.0-rc1","v0.29.0","v0.28.3","v0.28.2","v0.28.1-rc2","v0.28.1","v0.28.0","v0.27.0","v0.26.1","v0.25.0","dev-ebc3fbe","dev-e54ee33","dev-dc73246","dev-c7702ef","dev-c13a59d","dev-bad9503","dev-ad0ca5e","dev-a5207e0","dev-921c1c7","dev-8fc2763","dev-793e764","dev-78ed158","dev-438ebd7","dev-2631810","dev-1f51dc0","dev-02f174c"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-77179.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}]}