https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T00:59:30.331184+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-1189 certfr-2026-avi-1189 — De multiples vulnérabilités ont été découvertes dans Docker. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-09T00:59:30.377202+00:00 certfr-2026-avi-1189 https://vulnerability.circl.lu/vuln/fkie_cve-2026-79994 fkie_cve-2026-79994 2026-10-09T00:59:30.377266+00:00

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

 https://vulnerability.circl.lu/vuln/ghsa-wq46-97v9-q386 GHSA-wq46-97v9-q386 2026-10-09T00:59:30.377316+00:00

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-79994 UBUNTU-CVE-2026-79994 2026-10-09T00:59:30.377340+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:Pro:22.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io, Ubuntu:Pro:24.04:LTS: docker.io-app, Ubuntu:26.04:LTS: docker.io, Ubuntu:26.04:LTS: docker.io-app

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.