Researchers at security firm CyberArk were able to gain access to the underlying server running Docker's playground website because of the additional permissions provided in the set-up, the company says, adding that this was unlikely to be the case on all production sites which used Docker.