Or maybe see if someone has mounted /var/run/docker.sock inside the container?