Multiple Vulnerabilities in Docker Sandboxes

hello@craftedsignal.io — Wed, 16 Sep 2026 13:06:24 +0000

The French National Cybersecurity Agency (ANSSI) has published an advisory regarding multiple vulnerabilities identified within Docker Sandboxes. These vulnerabilities, identified as CVE-2026-77179 and CVE-2026-79994, affect versions prior to 0.42.0. If successfully exploited, these flaws could allow a remote attacker to achieve arbitrary code execution on the host or target container, compromise the confidentiality of sensitive data, or impact the integrity of stored or processed information. Organizations utilizing Docker Sandboxes are advised to refer to the official vendor security bulletin to apply the necessary patches. Given the potential for remote code execution, timely patching is critical to mitigate the risk of unauthorized system access.

Impact

Successful exploitation of these vulnerabilities may result in full remote control over the affected containerized environment. This exposure risks the exfiltration of sensitive data, modification of application logic, and broader lateral movement within the host system. The scope of impact extends to any organization deploying Docker Sandboxes in versions earlier than 0.42.0.

Recommendation

Upgrade Docker Sandboxes to version 0.42.0 or later immediately.
Review the official vendor security announcement at https://docs.docker.com/security/security-announcements/#docker-sandboxes-0420-security-update-cve-2026-77179-and-cve-2026-79994 to verify all addressed security fixes.
Identify and inventory all systems running Docker Sandboxes in the environment to ensure comprehensive patching.

Docker Sandboxes (< 0.42.0) - CraftedSignal Threat Feed

Multiple Vulnerabilities in Docker Sandboxes

Impact

Recommendation