CVE-2026-79994

Received Received - Intake

Docker Sandbox Unix-domain Socket Path Traversal

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Docker Inc.

Description

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-79994

EUVD

EUVD-2026-79951

Affected Vendors & Products

Vendor	Product	Version / Range
docker	docker	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This vulnerability involves a flaw in Docker Sandboxes where a guest can manipulate Unix-domain socket paths. The system checks if a socket path is valid but then reconnects using the same path. A malicious guest can replace an intermediate directory with a symlink, tricking the host into connecting to an arbitrary AF_UNIX socket outside the intended workspace. This could expose sensitive data or host capabilities.

Impact Analysis

If exploited, this vulnerability could allow an attacker to access sensitive data or host-side capabilities by redirecting socket connections. This might lead to unauthorized data exposure, privilege escalation, or compromise of host resources, depending on the targeted socket's purpose.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access to sensitive data, potentially breaching GDPR or HIPAA. Organizations using Docker Sandboxes may face regulatory penalties if data confidentiality is compromised due to this flaw.

Mitigation Strategies

Update Docker to the latest version that patches this vulnerability. Review Unix-domain socket configurations and ensure no unauthorized paths are accessible. Monitor for unusual socket connections or symlink manipulations.

Hi! I’m here to help you understand CVE-2026-79994. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70