If an attacker is able to execute their own code in a container, they may be able to overcome the container's isolation from other containers or the host and thus access other containers, the host system, or adjacent infrastructure. This is also referred to as a “container outbreak”. Such an attack can occur, for example, via vulnerabilities in processors, in the operating system kernel, or in locally offered infrastructure services such as DNS or SSH.

An attacker could thereby take control of the host system or other systems from the infrastructure. This presents the threat of a loss of confidentiality, integrity, and availability in all the containers running on the host, as well as on the host itself if the attacker can also gain elevated privileges there.