The container tool version 0.12.2 and earlier contains a vulnerability in the `container system dns create --localhost` command where the domainName argument is not sanitized. This allows injection of arbitrary pf firewall rules into the macOS kernel packet filter configuration. The vulnerability enables an attacker with sudo access to this command to escalate privileges by writing arbitrary firewall rules, bypassing the intended restriction to localhost redirects only. The issue is fixed in version 0.12.3.