CVE-2026-77179: Docker hypervisor sandbox escape exposes host

🕵️ RESEARCH & DEEP DIVES

• CVE-2026-77179: Docker hypervisor sandbox escape gives containers host filesystem access CVE-2026-77179
  Researchers reported a sandbox escape in Docker's Mac hypervisor that gave containers full host filesystem read/write access, fixed in Docker Desktop 4.88.0 and Docker Sandboxes 0.42.0.
  • Affects Docker Desktop (only when Docker VMM is enabled in Settings) and Docker Sandboxes; Docker VMM is scheduled to become the Docker Desktop default at the end of October 2026.
  • The bug lets a container gain complete read and write access to the host filesystem with three lines of bash.
  • It exploits Docker's virtio-fs file server: a guest deletes a looked-up file while holding it open, then replaces the parent folder with a symlink, so the server's path check passes but the kernel follows the symlink to a host file outside the mount.
  • Fixed in Docker Desktop 4.88.0 (shipped Aug 24, 2026, via sailor 0.118.0) and Docker Sandboxes 0.42.0 (Sep 7, 2026); earlier versions with Docker VMM selected are affected.
  • Reported to Docker on Aug 12, 2026; Docker acknowledged in ~7 hours and committed the fix (sailor commit 9f348c0) in ~31 hours.
  Sources 📎 Coverage: accomplish.ai · 👁 via r/netsec

📋 ADVISORIES

• 📄 Source for Totolink A3002MU router formWlWds buffer overflow CVE-2026-93741 rated critical 10.0 — vuldb.com