Docker Fixes Critical macOS Sandbox Flaw Allowing Host File Access

SAN FRANCISCO (AP) — Docker has issued an urgent security advisory for its desktop application on macOS after discovering a critical vulnerability that allowed malicious code to escape virtual machine sandboxes and access host files. The flaw, disclosed on Sept. 17, 2026, enabled attackers to read or modify sensitive data on the user's computer by bypassing isolation controls designed to separate containerized environments from the operating system.

The vulnerability stems from a defect in the virtio-fs host server and socket relay logic within the Docker Desktop application. This component is responsible for managing file system access between the guest virtual machine and the macOS host. Security researchers determined that malicious code executed inside a sandboxed container could exploit this logic error to break out of the virtual environment entirely. Once outside the sandbox, the code gained the ability to interact directly with the host file system, potentially compromising user data, credentials, or installed software.

In addition to the critical escape flaw, Docker identified a second high-severity vulnerability involving Unix sockets. This separate issue exposed socket communication channels, creating an additional vector for attackers to intercept traffic or execute commands on the host machine. Both vulnerabilities were present in versions of Docker Desktop running on macOS prior to the latest security update.

Docker stated that the issues arise from insufficient validation in the way the application handles file system requests and socket connections between the guest and host environments. The company has released an updated version of Docker Desktop for macOS that patches both flaws. Users are urged to update their software immediately to mitigate the risk of exploitation. No widespread active exploits have been confirmed, but the severity of the isolation breach prompted an immediate advisory.

The discovery highlights ongoing challenges in maintaining strict boundaries between containerized applications and host operating systems, particularly on platforms where virtualization relies on complex file sharing mechanisms. While Docker has addressed the specific code defects identified, security experts note that similar logic errors in other virtualization components could pose future risks. The company is currently reviewing related code paths to ensure no additional vulnerabilities exist within the macOS sandbox architecture.

Questions remain regarding whether any users were affected by the flaw before the patch was released, as the vulnerability required specific conditions to be exploited. Docker has not provided details on potential attribution or if the flaws were discovered through internal auditing or external research. The company continues to monitor the situation for any signs of active exploitation in the wild.