Omarchy: Any User Process Can Escalate to Root
A security vulnerability in the Omarchy Linux distribution allowed any user to escalate privileges to root due to improper Docker group configuration. Users are advised to update to version 4.0.1 to mitigate this risk.
Why it matters
Critical security information for system administrators and users of the Omarchy platform to prevent unauthorized root access.
A security issue in Omarchy's default Docker configuration meant that essentially every program running in the user's desktop session could escalate to root without a password, sudo , or a privilege prompt.
If you use Omarchy , the most important takeaway is simple: update to 4.0.1.
I reported this issue privately through the project's responsible-disclosure process. The underlying configuration has since been patched, so I'm publishing the details now to explain what the issue is and let users know to update their systems.
Omarchy configured its default user as a member of the Linux docker group.
That allows users to run commands such as:
On arch the Docker daemon runs as root and listens on:
/var/run/docker.sock Members of the docker group can communicate with that socket. Docker itself explicitly warns that the docker group grants root-level privileges to the user.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in