CVE-2026-79994: Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AFUNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Hosts using Docker Sandboxes with the guest-to-host Unix-domain socket relay are exposed when a guest can control paths within an authorized shared workspace. A malicious guest can exploit the race by replacing an intermediate directory after path validation.
What does an attacker need to exploit it?
The attacker needs code execution or equivalent filesystem control in a guest, plus the ability to modify an intermediate directory in an authorized workspace during the interval between validation and connection. The attack targets host AF_UNIX sockets reachable by redirecting the validated pathname through a symlink.
What is the impact if exploitation succeeds?
The host may connect to an arbitrary Unix-domain socket outside the shared workspace rather than the validated socket path. This can expose data or grant access to host-side capabilities offered by the targeted socket.