Back to Glossary
What is Container Escape?
Definition
An attack where a process running inside a Docker container breaks out of its isolation boundary and gains access to the host operating system.
Security Impact
Full host compromise, access to all other containers on the same host, and potential lateral movement across the entire Kubernetes cluster.
How to Remediate
Run containers as non-root, use read-only filesystems, drop all Linux capabilities, enable seccomp profiles, and keep container runtimes updated.
Want to automatically detect and block Container Escape vulnerabilities in your CI/CD pipeline?
Start scanning with Bryxe