Threats tagged 'ghsa-wq46-97v9-q386'

CVE-2026-79994 is a high-severity time-of-check to time-of-use (TOCTOU) race condition vulnerability in Docker Sandboxes. It affects the guest-to-host Unix-domain socket relay mechanism, where socket paths are validated but later reconnected using the pathname. An attacker with guest access can exploit the timing gap by replacing an intermediate directory with a symbolic link after validation, causing the host to connect to an unauthorized socket outside the intended shared workspace. This can lead to exposure of sensitive data or host capabilities accessible via the targeted socket.