Holistic Deconstruction of CVE-2019-5736: Technical Analysis of runc Container Breakout and Host Root Privilege Escalation
Abstract
This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a root user inside a container can achieve a Host Root Shell by overwriting the host runc binary using an OverlayFS mount and ld.so.preload manipulation.
Fields of Study & Subjects
Security and Verification in Computing
Digital and Cyber Forensics
Network Security and Intrusion Detection
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 19 January 2026