EIP-2026-114669

This Metasploit module exploits an unprotected Docker daemon TCP socket to create a container with host filesystem access, allowing the attacker to write a cron job for persistent remote code execution. It leverages Docker's API to mount the host's root directory and inject a malicious payload.