Technology
Omarchy patches privilege escalation flaw caused by default Docker configuration
A default setting assigning standard users to the Linux docker group enabled any user process to gain root-level host access without a password.
The short version
- A security flaw in Omarchy versions prior to 4.0.1 allowed any standard program running in a user session to escalate privileges to root without a password.
- The issue stemmed from assigning default users to the Linux docker group, granting child processes including web browsers and developer tools direct access to the root-owned Docker daemon.
- Maintainers patched the vulnerability in version 4.0.1 by removing default docker group membership, and users are urged to update immediately.
Key facts
- Omarchy versions prior to 4.0.1 configured default users as members of the Linux docker group.[Hacker News]
- Because the Docker daemon runs as root and listens on a local socket, members of the docker group can execute containers that mount and access the host filesystem as root.[Hacker News]
- Linux supplementary groups are inherited by child processes, exposing all applications under the user session—such as web browsers, editors, and scripts—to privilege escalation.[Hacker News]
- The vulnerability was privately reported and resolved in version 4.0.1 on August 24, 2026, by removing default docker group membership.[Hacker News]