lightdock exposes the Docker API on 127.0.0.1 only. Anyone with local access to that port has root-equivalent control of the engine. Do not forward or bind it to other interfaces.

Report vulnerabilities privately via GitHub's "Report a vulnerability" button on the Security tab.