Expired50% confidenceBenchmarkExact time
In Docker Sandboxes, even when Claude Code is granted full permissions, all escape tests (listing desktop files, reading Chrome Cookies, etc.) failed, and Claude Code was confined within the sandbox.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/16/2026
First Seen
Valid until: 10/14/2026(expired)
Sources
Related Claims
UnverifiedIn practical testing, all escape attempts by Claude Code within a Docker sandbox failed, including listing desktop files, querying the host operating system information, accessing the Downloads directory, and reading Chrome browser cookies.76% similarUnverifiedClaude Code has no sandbox concept by default; users need to actively set up a sandbox themselves.71% similarUnverified开箱即用的 Claude Code 默认只能访问一个代码仓库和一个 shell67% similarUnverifiedClaude Code implements a Permission Hook mechanism whereby any write operation is intercepted in a sandbox and must receive human confirmation before file writing can be executed.65% similarUnverifiedClaude Code的会话自愈机制结合了异常隔离沙箱、检查点快照和异常分类器三层架构65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/530554API
curl https://kongchang.com/api/v1/knowledge/claims/530554MCP
get_claim(id=530554)