3 ms·

Mounting /var/run/docker.sock has always been the same as full host access. That is a well-documented fact irrespective of this particular escape.