Unpatched Docker bug allows read-write access to host OS