← Back to feed
Vulnerabilities & PatchesEmerging1 sourceJul 23, 2026 · 05:00via Zero Day Initiative (Published)

ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

Brief

This vulnerability allows local attackers to escape the model runner sandbox on affected installations of Docker Desktop for macOS. An attacker must first obtain the ability to execute low-privileged code within the sandbox in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8. 8.

Read more on Zero Day Initiative (Published)