This vulnerability arises from a race condition in Docker Sandboxes' guest-to-host Unix-domain socket relay. The relay first validates that a socket path resides within an authorized workspace, but subsequently reconnects using the pathname without revalidating. An attacker controlling the guest environment can replace an intermediate directory with a symbolic link after validation but before connection, redirecting the host to connect to an unintended AF_UNIX socket outside the authorized workspace. This flaw can expose sensitive data or host capabilities accessible through the targeted socket, potentially compromising host security.

Exploitation of this vulnerability allows a malicious guest to cause the Docker host to connect to arbitrary Unix-domain sockets outside the authorized workspace. This can result in unauthorized exposure of data or host-side capabilities accessible via those sockets. The CVSS 4.0 score of 8.7 (high severity) reflects the significant confidentiality and integrity impact, with low attack complexity and no required privileges or user interaction.

No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the Docker vendor advisory for current remediation guidance. Until a fix is available, restrict untrusted guest access to Docker Sandboxes and monitor for suspicious activity related to Unix-domain socket usage.