Which versions of Docker are affected by CVE-2026-79994?

Docker Sandboxes versions 0.37.0 through 0.40.x contain a high-severity race condition (CVSS 8.7) that can allow code running inside a sandboxed guest to reach host-side Unix-domain sockets outside…. A patch is available.

How to fix or mitigate CVE-2026-79994?

Within 24 hours, inventory all installations of Docker Sandboxes and confirm which endpoints, developer workstations, CI runners, or build hosts are running versions 0.37.0 through 0.40.x; treat any host that runs untrusted or third-party guest images on those versions as potentially exposed and restrict or pause such workloads where operationally feasible. Within 7 days, upgrade every affected installation to Docker Sandboxes 0.41.0 (the vendor-released fix) and verify the running version post-upgrade, prioritizing hosts with access to sensitive sockets, orchestration control planes, or production credentials, and rotate any credentials or tokens that were reachable from a host socket on a system known to have run untrusted guests. Within 30 days, validate the remediation through configuration and version audits, add Docker Sandboxes version currency to your standard patch-management reporting, and review whether untrusted guest workloads can be constrained to hosts with minimal host-socket exposure to limit the blast radius of any future relay-layer flaws.

Docker CVE-2026-79994

Q: What is the CVSS score of CVE-2026-79994?

CVE-2026-79994 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

EUVD-2026-79951 HIGH

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-09-15 security@docker.com

GHSA-wq46-97v9-q386

Information Disclosure Docker

8.7

CVSS 4.0 · Vendor: docker

Severity by source

Vendor (docker) PRIMARY

8.7 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (docker) · only source for this CVE.

CVSS VectorVendor: docker

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 21:41 vuln.today

Patch available

Sep 15, 2026 - 21:20 EUVD

CVE Published

Sep 15, 2026 - 21:16 cve.org

HIGH 8.7

DescriptionCVE.org

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

Articles & Coverage 1

News We need answer only title. Need generate concise article title for vendor vulnerability roundup. Format: "N New [Product] Vulnerabilities - X Critical, Y With POC". Product Docker. Total CVEs 4. Severity CRITICAL 2 HIGH 2. POC count 0. Need max 100 chars. Return only title no quotes. Need decide title. "4 New Docker Vulnerabilities - 2 Critical, 0 With POC" That matches format. Check chars: 4(1)+space1=2 New=3? Let's count: Sep 16, 2026

AnalysisAI

Docker Sandboxes 0.37.0 through 0.40.x contain a time-of-check/time-of-use race (CWE-367) in the guest-to-host Unix-domain socket relay: the host validates that a requested socket path sits inside an authorized workspace and then reconnects using that same pathname, letting a malicious guest swap an intermediate directory for a symlink in the gap. A guest that wins the race causes the host-side relay to connect to an arbitrary AF_UNIX socket outside the shared workspace, exposing whatever data or host capabilities that socket provides. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, inventory all installations of Docker Sandboxes and confirm which endpoints, developer workstations, CI runners, or build hosts are running versions 0.37.0 through 0.40.x; treat any host that runs untrusted or third-party guest images on those versions as potentially exposed and restrict or pause such workloads where operationally feasible. …

Threat intelligence, references, and detailed analysis are available after sign-in.