Unverified50% confidenceFactExact time
Docker was once affected by the runc vulnerability CVE-2019-5736, which allowed processes inside a container to overwrite the host's runc binary and obtain root privileges.
1
Sources
50%
Confidence
Long-term
Relevance
10/1/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedCVE-2019-5736 (the runc vulnerability) allows a malicious container to overwrite the runc binary on the host machine, achieving container escape.80% similarUnverifiedKnown paths for sandbox escape include technical means such as exploiting container runtime vulnerabilities (e.g., runc CVE-2024-21626) and breaking through Linux namespace isolation.69% similarUnverifiedThe container escape vulnerability CVE-2019-5736 (runc vulnerability) was discovered because all containers share the same kernel69% similarUnverifiedHistorically disclosed container escape vulnerabilities (such as runc CVE-2019-5736 and runC Leaky Vessels) all exploited flaws in the shared kernel.68% similarUnverifiedThe CVE-2024-21626 vulnerability exploited a file descriptor leak in runc when handling working directories to achieve container escape, and emerged in early 2024.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/964464API
curl https://kongchang.com/api/v1/knowledge/claims/964464MCP
get_claim(id=964464)