Docker Sandboxes Unix socket relay flaw (CVE-2026-79994)
Vulnerability
Summary
Hide ▲
Show ▼
Docker fixed CVE-2026-79994 in Docker Sandboxes, closing a High relay flaw that could make a guest connect the host to AF_UNIX sockets outside the workspace. The issue carried a CVSS score of 8.7 and was fixed in 0.42.0. Docker and CISA both list no known exploitation.
Related Happenings
PCPJack Linux cloud credential-theft and persistence framework
Malware Activity
H score34
First: 07.05.2026 21:35
Last: 07.05.2026 21:35
Sources 1
About this happening:
PCPJack is a Linux cloud malware framework that steals credentials and removes TeamPCP access from exposed cloud systems. In June 2026, Hunt.io linked it to a...
PCPJack Linux cloud credential-theft and persistence framework
Malware ActivityAbout this happening: PCPJack is a Linux cloud malware framework that steals credentials and removes TeamPCP access from exposed cloud systems. In June 2026, Hunt.io linked it to a...
Latest development: 05.06.2026 08:34
Hunt.io reported that PCPJack hijacked cloud servers associated with Amazon Web Services (AWS), Google Cloud, and Microsoft Azure and quietly converted compromised business servers across the U.S., Europe, and Asia into SMTP proxies for a covert email relay pipeline. The recovered infrastructure included open directories on C2 213.136.80[.]73 containing source code, compiled binaries, deployment state logs, internet scanners, exploitation tooling, and a live Sliver configuration, plus Sliver-integrated SMTP proxy deployment tooling, Chisel binaries, and a persistent chisel_verifier.py process that checked relay capability and removed failed tunnels. Verified proxies were enriched with exit IP address, country, and ASN via api.ipify[.]org and ip-api[.]com, then synced every five minutes to 38.242.204[.]245, with the observed outcome reaching 230 nodes.
PCPJack worm-like credential theft framework
Malware Activity
H score27
First: 07.05.2026 20:45
Last: 07.05.2026 20:45
Sources 1
About this happening:
The PCPJack malware framework now conducts credential theft across exposed cloud infrastructure, raising the risk of account takeover and follow-on intrusion. It matters b...
PCPJack worm-like credential theft framework
Malware ActivityAbout this happening: The PCPJack malware framework now conducts credential theft across exposed cloud infrastructure, raising the risk of account takeover and follow-on intrusion. It matters b...
TeamPCP cloud-native exploitation campaign
Campaign
H score33
First: 09.02.2026 10:37
Last: 09.02.2026 10:37
Sources 1
About this happening:
TeamPCP is a cloud-native supply-chain campaign that has used exposed Docker APIs, Kubernetes clusters, Ray dashboards, Redis servers, and React2Shell (C...
TeamPCP cloud-native exploitation campaign
CampaignAbout this happening: TeamPCP is a cloud-native supply-chain campaign that has used exposed Docker APIs, Kubernetes clusters, Ray dashboards, Redis servers, and React2Shell (C...
Latest development: 06.08.2026 17:15
Oligo Security linked TeamPCP to TA-NATALSTATUS activity dating back to 2020 by matching domains, malware deployment paths and backend infrastructure, including masscan[.]cloud, and said the same operator ecosystem also encompassed ShadowRay 2.0 against exposed Ray clusters; GitLab banned the accounts involved.
Docker Ask Gordon AI assistant Meta-Context Injection security flaw
Vulnerability
H score32
First: 03.02.2026 17:15
Last: 03.02.2026 17:15
Sources 1
About this happening:
Docker's Ask Gordon AI assistant is affected by Meta-Context Injection, where unverified metadata can be turned into executable instructions. The flaw creates critical R...
Docker Ask Gordon AI assistant Meta-Context Injection security flaw
VulnerabilityAbout this happening: Docker's Ask Gordon AI assistant is affected by Meta-Context Injection, where unverified metadata can be turned into executable instructions. The flaw creates critical R...
Timeline
-
17.09.2026 18:37 2 articles · 13h ago
Docker 0.42.0 fixes CVE-2026-79994 in the sandbox Unix socket relay
Mitigation Patch UpdateDocker 0.42.0 closed CVE-2026-79994 in the guest-to-host Unix socket relay used by Docker Sandboxes, ending the 0.37.0 through 0.41.9 exposure window for a flaw that could let a sandboxed guest make the host connect to an AF_UNIX socket outside the workspace and expose data or host-side capabilities.
Show sources
- Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files — thehackernews.com — 17.09.2026 18:37
- Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files — thehackernews.com — 17.09.2026 18:37
-
15.09.2026 03:00 1 articles · 3d ago
Docker warns about CVE-2026-79994 in Docker Sandboxes and corrects the fixed version
Initial DisclosureDocker said CVE-2026-79994 affected Docker Sandboxes 0.37.0 through 0.41.9 and could let a guest replace a directory with a symlink between the workspace check and reconnect, causing the host to connect to an AF_UNIX socket outside the workspace; Docker also corrected the record to say 0.42.0 was the first fixed version and stated that exploitation was none.
Show sources
- Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files — thehackernews.com — 17.09.2026 18:37