CVE-2016-8867

CVE-2016-8867 describes a vulnerability in Docker Engine 1.12.2 where misconfigured capability policies allowed malicious container images to bypass user permissions and access files within the container filesystem or mounted volumes. This high-severity vulnerability (CVSS 7.5) has a network attack vector and low attack complexity, potentially leading to significant confidentiality impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.