{"id":"CVE-2026-79994","title":"The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname","summary":"The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlin…","severity":"high","cvss":8.7,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","cwe":["CWE-367"],"vendor":"Docker","product":"Docker Sandboxes","affected":["sandboxes >= 0.37.0 < 0.42.0"],"published":"2026-09-15","updated":"2026-09-16","sourceUpdated":"2026-09-16T20:38:33.883","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79994","references":[{"url":"https://docs.docker.com/ai/sandboxes/","label":"security@docker.com"},{"url":"https://docs.docker.com/ai/sandboxes/security/isolation/","label":"security@docker.com"},{"url":"https://github.com/docker/sailor/pull/2021","label":"security@docker.com"},{"url":"https://github.com/docker/sandboxes/pull/5342","label":"security@docker.com"},{"url":"https://github.com/docker/sbx-releases/releases/tag/v0.42.0","label":"security@docker.com"},{"url":"https://github.com/docker/sbx-releases/releases/tag/v0.41.0","label":"security@docker.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-16T17:56:16.161335Z"},"cvssSource":"cna","ingestedAt":"2026-09-15T20:44:02.612Z","epss":0.00106,"epssPercentile":0.01234,"slug":"CVE-2026-79994","body":"## Overview\n\nThe guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":47.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}