● Covered by 1 source · 1 reportMedium impact1 negative
Omarchy Linux Distribution Vulnerability Allowed User Processes to Escalate to Root
Key points
- Omarchy's default Docker configuration allowed root escalation.
- Default user was part of the 'docker' group, granting root access.
- Any process in the user session could exploit this.
- Users must update to Omarchy 4.0.1 to patch the vulnerability.
Vulnerability in Omarchy's Docker Configuration
A security flaw was discovered in the default Docker configuration of the Omarchy Linux distribution. This configuration allowed any program running within a user's desktop session to escalate its privileges to root without requiring a password, sudo, or any privilege prompt. The core of the issue was that the default user was automatically added to the Linux 'docker' group.
Mechanism of Escalation
Membership in the 'docker' group permits users to execute Docker commands without 'sudo'. Since the Docker daemon runs as root and listens on '/var/run/docker.sock', any process with access to this socket can instruct the root-owned Docker daemon to launch a container with root privileges. This container can then mount arbitrary host filesystem paths and operate on those files as root, effectively running code as root. Docker explicitly warns that the 'docker' group grants root-level privileges.
Scope of Impact
Linux supplementary groups are inherited by child processes, meaning this vulnerability affected the entire user session. Nearly every normal process within a user's session, including web browsers, editors, AI coding agents, and development tools, inherited the 'docker' group membership. This broad scope meant that a compromise of any ordinary user application could immediately lead to a full machine compromise.
Resolution and User Action
The underlying configuration issue has been patched by the Omarchy project. Users of Omarchy are advised to update their systems to version 4.0.1 immediately to mitigate this security risk. This update addresses the misconfiguration that granted excessive privileges to default users.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub basecamp/omarchyReporting from
A security vulnerability in Omarchy's default Docker configuration allowed any user process to escalate to root privileges without authentication. The issue stemmed from the default user being a member of the Linux docker group, which grants root-level access through the Docker daemon. This vulnerability meant that a compromise of a normal user application could lead to full machine compromise, necessitating an immediate update to Omarchy version 4.0.1.