This vulnerability affects the sandbox profile of the inference server process in Docker Desktop for macOS. The flaw is caused by a permissive allow list of inputs that enables an attacker, who already has low-privileged code execution within the sandbox, to escape it. This sandbox escape allows privilege escalation and arbitrary code execution in the context of the current user on the host system. Docker has released a patch to fix this vulnerability, as documented in their GitHub commit.

Local attackers with the ability to execute low-privileged code inside the sandbox can exploit this vulnerability to escape the sandbox environment. This leads to privilege escalation and arbitrary code execution on the host system with the current user's privileges, potentially compromising the affected system.

Docker has issued an update that corrects this vulnerability. Users of Docker Desktop for macOS should apply the official update to remediate this issue. No additional mitigation steps are indicated beyond applying the vendor's patch.