
Five years ago, Docker fixed a critical-severity vulnerability in Docker Engine that allowed threat actors to bypass authorization plugins and escalate privileges on flawed instances.
However, one of the newer versions, released after the patch, re-introduced the flaw, which apaprently remained present in Docker Engine until only recently.