Host compromise via root-run container processes

Improper privilege management in Vasion Print Application and Virtual Appliance Host allows attackers to gain root access after breaching a container. Docker startup configuration and service entrypoints launch PHP queue workers, Node.js servers, and custom binaries as root instead of a restricted account. Exploitation requires prior compromise of a containerized service; the excessive privilege then expands lateral movement and host-compromise impact rather than providing initial access.