Docker Sandboxes Vulnerability in Virtio-FS Grant Access
CVE-2026-18171

5.7MEDIUM

Key Information:

Vendor

Docker

Status
Docker Sandboxes
Vendor
CVE Published:
12 August 2026

What is CVE-2026-18171?

In Docker Sandboxes, a vulnerability arises due to the manner in which read-only intents from runtime host mounts are applied. Specifically, while the intent applies to the guest container bind, the underlying virtio-fs host-edge grant is incorrectly listed in the sandbox's policy-share allowlist without an access mode. This misconfiguration permits unprivileged code running inside the sandbox to identify the writable path of the directory, ultimately allowing it to write to a host directory that was intended to be read-only. This situation compromises the integrity of host directories attached to the sandbox.

Affected Version(s)

Docker Sandboxes MacOS 0.35.0 <= 0.38.0

References

https://docs.docker.com/ai/sandboxes/
product
https://docs.docker.com/ai/sandboxes/architecture/
product

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Robbe Van Roey of Aikido Security
.