Docker's CopyEscape: a docker cp destination escape and what I checked on my swarm
docker cp could write files outside the destination you pick and take over the host.
docker cp could write files outside the destination you pick and take over the host.