Containers Are No Longer a Security Boundary

2026-09-29

The perception of containers as a robust security and isolation mechanism is diminishing due to a growing number of kernel vulnerabilities. This article demonstrates how a recent AF_UNIX subsystem vulnerability can be exploited for container escapes. The authors suggest migrating untrusted workloads to MicroVMs, such as Firecracker or Kata Containers, for enhanced security.