It was discovered that runc, a command line client for running applications packaged according to the Open Container Format , was suspectible to multiple container breakouts due to an internal file descriptor leak.