Some Docker containers may not be as secure as they like, experts warn

Three high-severity vulnerabilities in runC container runtime could allow attackers to escape containers and gain admin access to host systems running Docker and Kubernetes. The flaws affect older runC versions and require custom mount configurations to exploit, but can be mitigated through user namespaces and rootless containers.