ACVEAgent configuration vulnerability registry

Advisories › ACVE-2026-0436

ACVE-2026-0436

Docker Sandboxes below 0.42.0, running code from a sandboxed coding project, let guest code reach macOS host files or host-side Unix sockets outside the authorized workspace.

Exposure

Harness
Docker Sandboxes 0.28.0 to before 0.42.0, and Docker Desktop with Docker VMM before 4.88.0 — detected, docs.docker.com
Model
any — unconfirmed
Goal
Any coding-agent task running code in a Docker Sandbox (goal not stated by the source) — unconfirmed
Tools and settings
Docker Sandboxes guest filesystem sharing and guest-to-host Unix socket relay — confirmed, docs.docker.com
Approval
Code running in the guest can reach host resources through the sandbox boundary — confirmed, docs.docker.com
Input controlled by
repo-author
What the agent does
The sandboxed guest reaches host files or host-side socket capabilities outside the authorized workspace.
Harm
arbitrary-command
Reach
Host files and host-side Unix socket capabilities — confirmed, docs.docker.com (the home directory, project files, the network)

Reproducibility: partial (vulnerable components are not confirmed obtainable; trigger not published)

Severity
CRITICAL
Status
Unverified
Kind
Code
Modified
2026-09-25
Aliases
CVE-2026-77179, CVE-2026-79994
Affected
  • AgentHarness: docker-sandboxes — >= 0.28.0 < 0.42.0
  • AgentHarness: docker-desktop — < 4.88.0
Harness/product
docker-sandboxes + docker-desktop
Classes
sandbox-escape; path-traversal; CWE-61; CWE-367
Taxonomy
ASI: ASI05; ATLAS: AML.T0105
First reported
2026-09-07 — Docker
Licence
CC-BY-4.0 advisories; MIT code

Claims

Confirmed means the statement matches the cited primary source. Nothing on this page has been reproduced.

ClaimStatusSourceChecked
Identifier CVE-2026-77179Confirmedcveawg.mitre.org2026-09-24
Identifier CVE-2026-79994Confirmedcveawg.mitre.org2026-09-24
Fixed in 0.42.0Confirmedcveawg.mitre.org2026-09-24
Fixed in 4.88.0Detectedcveawg.mitre.org
Severity CRITICAL; matches CNAConfirmedcveawg.mitre.org2026-09-24

In the wild

demonstrated

Description

What

Docker's security announcement describes two Docker Sandboxes flaws fixed in 0.42.0. One allowed guest code on macOS to access host files outside the shared workspace; the other allowed a guest to reach host-side Unix sockets outside that workspace.

Detection

Recorded from Docker's security announcement and the contemporaneous report. Not recreated in a lab.

Fix

Upgrade Docker Sandboxes to 0.42.0 or later; Docker recommends clone mode and avoiding read-write host mounts if an update is not possible.

Fix

Upgrade Docker Sandboxes to 0.42.0 or later and Docker Desktop to 4.88.0 or later.

  • Upgrade harness:docker-sandboxes to 0.42.0. First release that fixes both Docker Sandboxes CVEs. Owner: operator
  • Upgrade harness:docker-desktop to 4.88.0. Fix stated by the reporter for Docker Desktop. Owner: operator

References

REPORT

Report a problemJSON