Omarchy: Any User Process Can Escalate to Root
Points and comments are a snapshot, not live.
Omarchy's default Docker group membership lets any user process escalate to root without a password.
The security issue affects Omarchy versions before 4.0.1. The distro added the default user to the Linux `docker` group, granting root-level access via the Docker socket. This means any process in the user's session-including browsers, AI agents, and npm scripts-can read protected files like `/etc/shadow` and gain full root control. The configuration was opt-out and not explained to users. The researcher reported it privately; Omarchy removed the group membership in commit b5ded31. The author recommends Podman as a rootless alternative.
What commenters are saying
Many commenters were shocked by the obviousness of the misconfiguration, noting Docker itself explicitly warns against it. Some argued this is common in desktop usage for convenience and that the security risk is minor for single-user machines. Others criticized Omarchy for making an unsafe default without user awareness. Several recommended rootless Podman or Docker as safer alternatives. A few pointed out that LLMs have been observed exploiting exactly this misconfiguration unprompted.