Break out of a container through the Docker socket
A mounted or reachable docker.sock is root on the host, because you can start a container that bind-mounts the host filesystem.
Tag: container-escape
Escape a privileged pod to the node
A privileged or hostPath-mounting pod is a foothold on the node; mount the host filesystem or use host namespaces.