AIKIDO-2026-10173

TL;DR

Affected versions of this package allow containers to run without the no-new-privileges:true security control, which may enable privilege escalation within the container environment. An attacker who gains code execution inside the container could exploit setuid/setgid binaries or misconfigured capabilities to obtain elevated privileges, potentially accessing sensitive resources or affecting the host system depending on container isolation and runtime configuration. This security hardening prevents processes from gaining additional privileges beyond their initial execution context.