Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102821. PoCs published by Sebastian Krahmer.
AI-analyzed exploit summary This exploit demonstrates a Docker container breakout via file handle manipulation, allowing access to host files (e.g., /etc/shadow) by brute-forcing inode handles. It leverages the shared filesystem structure between the host and container to bypass isolation.
Description
Docker 0.11 - VMM-Container Breakout
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Sebastian Krahmer · clocallinux
https://www.exploit-db.com/exploits/33808
This exploit demonstrates a Docker container breakout via file handle manipulation, allowing access to host files (e.g., /etc/shadow) by brute-forcing inode handles. It leverages the shared filesystem structure between the host and container to bypass isolation.
Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target:
Docker (tested with version 0.11 on Linux kernel 3.11)
No auth needed
Prerequisites:
Docker container with access to a host-mounted file (e.g., /.dockerinit) · Linux kernel with vulnerable file handle implementation
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026