
Docker Sandboxes macOS Host Escape: What Guest Code Can Read and Modify
A critical Docker Sandboxes vulnerability let malicious guest code running inside a container read and modify files on the macOS host, a reminder that local and CI containers should not be treated as trusted security boundaries.


