> cat /dev/github | grep security-tools
discovered 03 Aug 2026

CVE-2022-0847-Container-Escape

C ★ 37 via github-topic
→ View on GitHub
The CVE-2022-0847 tool exploits a vulnerability known as "Dirty Pipe" to achieve container escape, allowing an attacker to overwrite read-only files on the host system from within a container. Its primary use case is for demonstrating the potential risks associated with granting the `CAP_DAC_READ_SEARCH` capability to containers. Notable features include the ability to bypass file permission checks and use the `splice()` system call to overwrite files directly on the host filesystem.