A critical security vulnerability in Omarchy's default Docker configuration has been identified and patched in version 4.0.1. The issue stemmed from the default user being added to the Linux docker group, allowing any process in a user session to escalate privileges to root without authentication. This occurred because the Docker daemon runs as root and listens on a socket that docker group members can access.

Consequently, a user could execute commands like 'docker run' to mount the host filesystem and gain root access, effectively compromising the entire machine through any running application. The vulnerability was introduced as an opt-out default rather than an opt-in setting, meaning users were not adequately informed of the security tradeoff. Versions prior to 4.0.1, including the latest 3.x release, were impacted.

The fix involves removing docker group membership from the default configuration. Users are strongly advised to update to the latest version immediately to mitigate the risk of full system compromise through seemingly benign user processes. The responsible disclosure process ensured the underlying configuration was secured before public details were released.