{"uuid": "29f64bba-1ed5-43e4-a46c-c6562b48ca52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://t.me/pphm_HackerNews/3196", "content": "\ud83d\udd34 Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files\n\nDocker has released security fixes for two serious vulnerabilities in Docker Sandboxes that could let a malicious guest environment bypass workspace isolation and access sensitive resources on the host.\n\nThese flaws, identified as CVE-2026-77179 and CVE-2026-79994, were addressed in Docker Sandboxes version 0.42.0, which was released on September 7.\n\nDocker Sandboxes isolate development agents and workloads while selectively sharing a host workspace. Both vulnerabilities arise from improper handling of pathnames after an authorization decision: a compromised sandbox could exploit symbolic links to alter a directory path between the validation and subsequent host-side access.", "creation_timestamp": "2026-09-20T10:00:04.984403Z"}