The flaws let attackers abuse masked paths, console bind-mounts, and redirected writes to escape containers and gain host ...