{"id":"CVE-2026-79994","summary":"Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race","details":"The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.","modified":"2026-09-17T03:47:26.035459864Z","published":"2026-09-15T20:33:21.074Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79994.json","cna_assigner":"Docker","cwe_ids":["CWE-367"]},"references":[{"type":"WEB","url":"https://docs.docker.com/ai/sandboxes/"},{"type":"WEB","url":"https://docs.docker.com/ai/sandboxes/security/isolation/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79994.json"},{"type":"ADVISORY","url":"https://github.com/docker/sbx-releases/releases/tag/v0.42.0"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79994"},{"type":"FIX","url":"https://github.com/docker/sailor/pull/2021"},{"type":"FIX","url":"https://github.com/docker/sandboxes/pull/5342"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/docker/sbx-releases","events":[{"introduced":"e4809b108ff941fbd3dc8ab1edd8755af78ddc07"},{"fixed":"bdfd32bd69bb084959b5f4779310bff21d95bb62"}],"database_specific":{"extracted_events":[{"introduced":"0.37.0"},{"fixed":"0.42.0"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["v0.39.0-rc3","v0.38.0-rc4","v0.38.0-rc3","v0.38.0-rc2","v0.38.0-rc1","v0.38.0","v0.37.1","v0.37.0-rc4","v0.37.0-rc3","v0.37.0-rc2","v0.37.0-rc1","v0.37.0","v0.36.0-rc1","v0.35.0-rc3","v0.35.0-rc2","v0.35.0-rc1","v0.35.0","v0.34.0-rc3","v0.34.0","v0.33.0-rc4","v0.33.0-rc3","v0.33.0-rc2","v0.33.0-rc1","v0.33.0","v0.32.0-rc1","v0.32.0","v0.31.3-rc1","v0.31.3-rc.cloud1","v0.31.3","v0.31.2-rc1","v0.31.2","v0.31.1","v0.31.0-rc5","v0.31.0-rc4","v0.31.0-rc3","v0.31.0-rc2","v0.31.0","nightly-202608121104-89ca6d4","nightly-202608120639-63a9f70","nightly","dev-fce4efc","dev-fca8c62","dev-fb4d881","dev-f876ac1","dev-ecf06ff","dev-e59c912","dev-e24ee78","dev-e0206e3","dev-db9ab5e","dev-d3b51ba","dev-cf3aefc","dev-c403eab","dev-c3b5df8","dev-c1c4294","dev-b98b0d2","dev-a87b636","dev-a5e90ab","dev-a1e6548","dev-8cb6035","dev-7ff7ed3","dev-7348d77","dev-71807af","dev-6ee1432","dev-6e7b804","dev-618cd2d","dev-5fbe85a","dev-5c8bb9b","dev-5b83c27","dev-577d7b7","dev-4e29266","dev-4a858f0","dev-48a0c6f","dev-454ec6f","dev-43f95b2","dev-3371712","dev-2f5b337","dev-2c6c51b","dev-28b7fe7","dev-228b4d1","dev-1db310e","dev-1aa36bc","dev-16a33ce","dev-15ee692","dev-150e25f","dev-115fb8a","dev-1018f9a","dev-0f7cf24","dev-0c6b966","dev-021a5cd"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79994.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N"}]}