ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability
This vulnerability allows local attackers to escape the model runner sandbox on affected installations of Docker Desktop for macOS. An attacker must first obtain the ability to execute low-privileged code within the sandbox in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-451?
ZDI-26-451 has been assigned a CVSS rating indicating a risk score of 52.
How do I fix ZDI-26-451?
To fix ZDI-26-451, ensure you update Docker Desktop for macOS to the latest version that addresses this vulnerability.
What does ZDI-26-451 allow an attacker to do?
ZDI-26-451 allows attackers to escape the model runner sandbox on affected installations of Docker Desktop for macOS.
Who is affected by ZDI-26-451?
Any user running the susceptible version of Docker Desktop for macOS Inference Server is potentially affected by ZDI-26-451.
What is the nature of the attack for ZDI-26-451?
The attack for ZDI-26-451 requires local access and the ability to execute low-privileged code within the sandbox.