containers

Your browser tab runs as root on Omarchy

Omarchy versions before 4.0.1 put the default user in the docker group, giving any process in the session a passwordless path to root. Update to 4.0.1.