Any user process can escalate to root
Summary
A security-focused blog post explains how adding a user to the Docker group can grant root-level privileges via the Docker socket, enabling potential root escalation. It highlights risks in self-hosted setups and with LLM coding harnesses, and suggests a remediation (removing the user from the docker group) plus a Podman alternative for better security.