Vulnerabilities discovered recently in the Runc container runtime can be exploited to escape containers and gain root access to the host.