Container Escape in Bitbucket Pipelines Kata Containers 20 April 2021 **tl;dr** Uses a known docker breakout to escape into the wrapping VM, then by replacing a logfile with a symlink you could post to locations on the host machine.