Docker has disclosed a critical vulnerability in its Sandboxes feature for macOS. Malicious code running inside a Sandboxes virtual machine could break out of the project directory that is shared into the VM and access files elsewhere on the host.
The escape allows guest code to read or modify host files, and it runs with the rights of the host user. That means a compromised or malicious container could potentially alter sensitive files outside the intended workspace.
Docker warned about the issue on September 15. The advisory describes the flaw as critical, and administrators and developers using Docker Sandboxes on macOS should treat it as a serious exposure until a fix or mitigation is available.