Threat Intelligence Brief
Curated summary with source attribution
Source: thehackernews.com
Threat Risk: High
Victim: macOS users running Docker Sandboxes
Incident: Discovery of a critical sandbox escape vulnerability (CVE-2026-77179) in Docker Sandboxes.
Impact: Potential unauthorized read/write access to host files and potential code execution on the macOS host.
Attacker: Unidentified threat actors or compromised AI agents
Analysis: A vulnerability in the virtio-fs host server allows guest VMs to bypass directory restrictions using symlinks. This enables a compromised AI agent or malicious code to read and modify files on the macOS host with the privileges of the VM user. Additionally, a second flaw allows unauthorized access to Unix domain sockets outside the authorized workspace.
Recommendations: Update Docker Sandboxes to version 0.42.0 or later immediately.; Audit permissions for accounts running virtual machine monitors on macOS.; Limit the scope of host directories shared with AI coding agents.
Source: The Hacker News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source