CRITICAL DOCKER SANDBOXES FLAW LETS MALICIOUS GUEST CODE READ AND MODIFY MACOS HOST FILES

Summary from the TLDR InfoSec newsletter

Docker fixed CVE-2026-77179 in Sandboxes 0.42.0, which allowed malicious guest code on macOS to abuse virtio-fs symlink handling to access or modify host files as the VM monitor user. Version 0.42.0 also fixes CVE-2026-79994, a socket-relay race. Update to 0.42.0 or later ASAP.