GoKawiilOmarchy Linux patches Docker group flaw allowing silent root access
Researchers found that Omarchy's default configuration added users to the Linux docker group, which lets any process communicate with the root-owned Docker daemon without needing sudo or a password prompt. This effectively gave every application running in a user's desktop session the ability to mount host files and execute commands as root. The issue was reported through responsible disclosure and fixed in Omarchy version 4.0.1.