Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.42.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The software affected is Docker Sandboxes on macOS, specifically its virtio-fs host server that shares files between the host and the sandboxed guest. A malicious guest can use a symlink trick to escape the shared workspace and read or modify arbitrary files on the host as the VMM user, which could potentially lead to running code on the host.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.
Timeline
- CVE published
- Record last updated
Affected versions
- Docker Docker Sandboxes
From 0.28.0 · fixed in 0.42.0