---
id: 4427
title: "Why is Exposing the Docker Socket a Really Bad Idea?"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/why-is-exposing-the-docker-socket-a-really-bad-idea.html"
published_at: "2021-12-13T23:00:00Z"
tags: ["linux", "privilege-escalation", "containers", "docker", "misconfiguration", "security"]
phying_url: "https://phying.com/item/4427"
lang: en
---

# Why is Exposing the Docker Socket a Really Bad Idea?

## Summary

Why exposing the Docker socket is dangerous: what read/write access to /var/run/docker.sock enables, with concrete examples escalating to root on the host.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2021-12-13T23:00:00Z
- **Original:** https://blog.quarkslab.com/why-is-exposing-the-docker-socket-a-really-bad-idea.html
- **Phying News:** https://phying.com/item/4427
