GoKawiilDocker's Root-Level Daemon Design Poses Ongoing Security Risk, Rootless Mode Urged
A security researcher highlights how Docker's default client-server architecture runs its daemon as root, meaning any user with access to the Docker socket can escalate privileges to full root access without a password. The piece demonstrates this with a simple command that mounts the host filesystem inside a container and bypasses normal permission checks, tying the issue to a recent vulnerability disclosed in an unnamed Linux distribution whose installer enabled an insecure Docker configuration by default.