Unverified50% confidenceFactExact time
open-terminal is essentially a command execution agent running inside an isolated container; LLM commands are confined within the container and cannot directly access the host file system unless host directories are explicitly mounted.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedOpenHands采用基于Docker容器的沙箱方案，每个任务在独立容器环境中运行，与宿主机系统完全隔离70% similarUnverifiedMisconfigured container runtimes (such as the Docker daemon) can be exploited to achieve container escape and gain host machine privileges.68% similarUnverifiedAn execution container generally refers to a lightweight isolated runtime environment used to safely execute untrusted code or code requiring resource constraints.68% similarUnverifiedWhen running AI programming tools inside a Docker container, even executing the rm -rf / command affects only the virtual file system within the container, leaving the host machine's actual data unaffected.66% similarUnverifiedDocker containers achieve process isolation through Linux namespaces and control group technology, preventing AI Agents inside the container from directly accessing the host machine's file system, network, and processes.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1003584API
curl https://kongchang.com/api/v1/knowledge/claims/1003584MCP
get_claim(id=1003584)