[earslap]

It is not a vulnerability though. It is by design. Docker also modifies iptables directly and bypasses most soft firewalls on the machine - which is also by design.

[causal]

Intentional security holes are still security holes