Project
Docker is a platform for building, packaging, and running applications in lightweight OS-level containers, with tools like Engine, CLI, Compose, and Hub.
A dev.to post measured 73 MB of buildx cache under Local Volumes on Docker Engine 29.9.0 while Build Cache read 0 B. docker builder prune works only on the selected builder, so CI hosts need to clean the other builder's volume separately.
Reality
Docker fixed critical Docker Hub flaw CVE-2026-105445 under four hours after a report, ending a 765-day exposure window. Docker says it found no evidence of exploitation; the open check for teams is whether anyone of theirs was named owner in a conversion.
Perspective Coverage
4 publishersReality
DepthFirst published a working Ubuntu 26.04 exploit for CVE-2026-80521 on 2026-09-22, before distribution kernels carried a fix, according to a dev.to post. The flaw sits in AF_UNIX, which default Docker and Kubernetes seccomp profiles permit.
Reality
vLLM's --api-key guards four path prefixes, so /invocations, /tokenize and /pause answer without a key. The server also binds every interface by default, so a dev.to walkthrough puts it on localhost behind an allowlist proxy.
Reality
Docker says it fixed a Docker Hub token flaw about four hours after an outside researcher reported it on September 30. Teams that publish from CI should check whether Docker flagged their tokens and whether their published images still match their builds.
Reality
MITRE rated CrewAI's nine-name code-sandbox blocklist a CVSS 8.1 flaw, bypassed by a call that executes no import. The fix removed the feature, so teams running agent-written code need isolation at the OS or process level.
Reality
DeepAgents runs in a four-file Docker Sandbox kit whose agent can reach only a local Model Runner on port 12434, with no cloud keys. The egress policy is careful work, and exact reproduction still rests on what PyPI serves when each sandbox is created.
Reality
Docker published its Sandbox Kit Specification v3 under Apache 2.0, packaging an AI agent's permissions and tools as an ordinary OCI image. Grants that developers now keep in shell history and run flags can be pinned by digest and reviewed like any other image change.
Reality
Shipshape's team-only history log would have shown hackathon teams their judges, scoring times and conflict notes despite seven passing acceptance checks. Its role tests checked who could open each page, while the leak was in what that page printed for the team members allowed in.
Reality
Laravel 13.33 and 13.34 add opt-in guards for two of the three ways a queued job dies in Docker, worker timeouts and crashes. Neither touches Docker's stop grace period, so a slow model call still gets ten seconds by default after a deploy's SIGTERM.
Reality
ThreatDown says the Carbonato worm breaks into Docker daemons open on port 2375 and installs the open-source Hermes AI agent, then rescans nearby networks every five minutes to spread. An operator drives each infected host over Telegram.
Reality
Portainer says 2.45 LTS ends its Community Edition line and 3.0 ships Kubernetes-first, with free use only through 3 Nodes Free. Docker-host operators now pick a fixes-only 2.x, an account-licensed 3.x or another tool, with no forced deadline yet.
Reality
CARBONATO, a Docker botnet running since October 2024, hijacks hosts on open port 2375 and steals keys from 14 AI providers to fund its own LLM gateway. ThreatDown found the crew's own container registry exposed, handing defenders 4.3 GB of its toolchain.
Perspective Coverage
3 publishersReality
The kernel fixed CVE-2026-80521 on August 6. Ubuntu has shipped nothing for 22.04, 24.04 or 26.04, including its AWS, Azure and GCP kernels, and DepthFirst's exploit for 26.04 went public on September 22.
Reality
One developer's audit of a self-hosted OpenClaw agent found four ports Docker opened past ufw and watchdog crons using about 1,340 LLM turns a week. The repairs bind container ports to loopback, and the author now measures agent cost as quota by counting task runs.
Reality
Docker Cloud Sandboxes let one command move a coding agent's microVM sandbox from laptop to cloud, for runs Docker pitches at up to 21 hours. Where an agent runs becomes a CLI choice, though commenters argue the harder limit is which outside services it can reach.
Reality
systemd's mstack mounted a single-layer directory writable by default in a dev.to test, and one written line overwrote a read-only file with exit code 0. Anyone shipping a one-layer stack in a unit file has to prove read-only with a test write.
Reality
A developer scanned their own MacBook from a second machine on the same network. The parts macOS ships were invisible; the exposure that stayed open was the dev servers they had left running, wider than they thought.
Reality
Docker's new Cloud Sandboxes run AI agents unattended for hours in microVMs on Docker-hosted compute that scales from 1 to 16 vCPUs. Teams that adopt it move agent secrets and policy enforcement into Docker's cloud, on isolation claims that so far come only from Docker.
Reality
Every Cloud Build run gets a fresh VM with an empty Docker daemon, so the only layer cache that survives a build is one exported to a registry. The documented paths reach for a published image or an archived tool instead.
Reality