Some Docker containers may not be as secure as they like, experts warn

Malware.

• Three runC flaws could allow container escape and host access with admin privileges
• Bugs affect Docker/Kubernetes setups using custom mounts and older runC versions
• Mitigation includes user namespaces and rootless containers to limit exploit impact

The runC container runtime, used in both Docker and Kubernetes, carried three high-severity vulnerabilities that could be used to access the underlying system, security researchers have warned.