Verified80% confidenceFactExact time
CVE-2019-5736 (the runc vulnerability) allows a malicious container to overwrite the runc binary on the host machine, achieving container escape.
6
Sources
80%
Confidence
Long-term
Relevance
7/15/2026
First Seen
Sources
Related Claims
UnverifiedDocker was once affected by the runc vulnerability CVE-2019-5736, which allowed processes inside a container to overwrite the host's runc binary and obtain root privileges.80% similarUnverifiedThe CVE-2024-21626 vulnerability exploited a file descriptor leak in runc when handling working directories to achieve container escape, and emerged in early 2024.79% similarUnverifiedKnown paths for sandbox escape include technical means such as exploiting container runtime vulnerabilities (e.g., runc CVE-2024-21626) and breaking through Linux namespace isolation.79% similarUnverifiedHistorically disclosed container escape vulnerabilities (such as runc CVE-2019-5736 and runC Leaky Vessels) all exploited flaws in the shared kernel.78% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/518202API
curl https://kongchang.com/api/v1/knowledge/claims/518202MCP
get_claim(id=518202)