Critical flaw in Docker Sandbox allows virtual machine escape on macOS

Malicious code in a Docker Sandbox virtual machine on macOS can escape the shared directory.

Published 9h2 sources✓ ConfirmedImportantupdated 6h

≈ 21sSpeed

The fact

The vulnerability allows reading or modifying files on the host with the user account’s permissions.

Docker released a patch on September 15, 2026, to fix this flaw.

2 sources — click a link to read an article on the topic:

Explore this topic

Auto-synthesis from 2 media sources · identified on September 18, 2026