Docker CopyEscape (CVE‑2026‑17106) lets containers overwrite host files and gain root
A race‑condition in Docker’s docker cp command (CVE‑2026‑17106) lets a malicious container rewrite arbitrary host files, including system binaries, when the command runs with elevated privileges. The flaw can lead to code execution as the local user and, on sudo‑enabled setups, as root, threatening CI pipelines and production servers.