Three lines of bash escape Docker's Mac hypervisor: CVE-2026-77179 patched in Docker Desktop 4.88.0
blaizedsouza · x · 2026-09-19
Security researcher Oren Yomtov disclosed a sandbox escape in Docker's hypervisor for Mac: a container gains full read/write access to the host filesystem with three lines of bash. Assigned CVE-2026-77179, fixed in Docker Desktop 4.88.0 and Docker Sandboxes 0.42.0.
Root cause: When mounting a folder, Docker VMM uses virtio-fs with the file server on the host. After the first path lookup, the guest addresses files by nodeid, and the server relocates the file on every request — first by inode via macOS volfs, falling back to the saved path string. A guest can open a file, delete it while holding the handle (killing the volfs path), then replace the parent folder with a symlink: the server validates the string as still inside the mount, but the kernel follows the symlink and opens any file on the host.
Why it matters: Docker Desktop is only affected with Docker VMM enabled — which was scheduled to become the default at the end of October 2026, so the timing of the disclosure is fortunate.
More from Infra
- How Google's Leopard Index makes Zanzibar auth checks two lookups at any nesting depth — arpit_bhayani · 2026-09-19
- BONSAI SWARM Launches Browser-Based P2P Inference Network to Trade Idle GPU Time — airesearch12 · 2026-09-19
- Open models now outspend OpenAI on Vercel gateway, taking 78% of token volume — soumitrashukla9 · 2026-09-19
- Multi-GPU rig cooling debate: should fan curves be tuned per GPU under load — TheZachMueller · 2026-09-19
- ROCmFix: zero-dependency Python tool auto-fixes AMD ROCm setups and benches Vulkan vs HIP — pavlexlkl · 2026-09-19
- Emulating memory access: FEX-Emu devs on the x86-to-ARM memory model minefield — blaizedsouza · 2026-09-19