A security vulnerability in the Official Docker images based on the Alpine Linux distribution allowed for more than three years logging into the root account using a blank password. Tracked as CVE-2019-5021, the vulnerability has a critical severity score of 9.8.