Exfiltrate what? It's an empty container.

There do exist container escaping exploits.