Omarchy: Any User Process Can Escalate to Root
- ID
- 19620
- Status
- summarized
- Published
- 30 Aug 2026, 11:59 PM
- Fetched
- 01 Sep 2026, 8:41 PM
- Provider
- Hacker News
- Category
- dev-community
- Original URL
- https://0xcc.io/posts/omarchy-root-creds/
- Source URL
- https://hnrss.org/best
Summary
- Score
- 7.0
- Created
- 01 Sep 2026, 9:54 PM
- Tags
- Audience
- developersai_agent_usersvibe_coders
What happened
Omarchy's default Docker configuration added the default user to the Linux docker group, which means any process in the user session—AI coding agents, browsers, IDEs, npm scripts—could escalate to root without a password by asking the root-owned Docker daemon to mount the host filesystem and operate on it as root. The issue is patched in Omarchy 4.0.1, and the configuration was opt-out rather than opt-in, meaning users were exposed even if they never used Docker.
Why it matters
If you run Omarchy, update to 4.0.1 immediately. More broadly, this is a concrete reminder that adding a user to the docker group is equivalent to granting passwordless root, and that AI coding agents or npm scripts running in such a session can trivially pivot to full machine compromise. Builders running agent harnesses or untrusted code on Linux desktops should verify their own docker group memberships and treat that group as root-equivalent.
Discussion angle
How many of us have our default dev user in the docker group and are running AI coding agents in that same session? That's effectively giving agents root with no prompt.