What is the security risk of mounting the Docker socket (`/var/run/docker.sock`) into a container?

It effectively grants that container root-equivalent control over the entire host's Docker daemon — it can create, inspect, or remove any container, including privileged ones, making socket-mounting a significant privilege escalation risk if the container is compromised or runs untrusted code.