Omarchy: Any User Process Can Escalate to Root

What happened

A security issue in Omarchy’s default Docker configuration meant that essentially every program running in the user’s desktop session could escalate to root without a password, sudo, or a privilege prompt. If you use Omarchy, the most important takeaway is simple: update to 4.0.1. I reported this issue privately through the project’s responsible-disclosure process. The underlying configuration has…

Summary assembled by rule from the sources below

Timeline

1. 15:59
   First appeared on Hacker NewsHHacker News
2. 18:11
   Discussion started on LobstersLLobsters

Sources