#privilege-escalation

Docker as an attack surface

A mounted socket, a privileged flag, or a shared PID namespace. Three ordinary looking configurations that each hand you the host.