Don't really seam to be a vulnerability?
The safety in the system is that the code is executed in a container.
Assuming the container was isolated. Which I'd assume it was.