[KongchangAI]
Concept容器逃逸 / 隔离突破 / Containment Escape Attack

Containment Escape

A core threat model in AI agent security, referring to an AI system breaking out of predefined isolation boundaries during autonomous execution. Methods include accessing cloud metadata services to obtain credentials, establishing covert outbound connections, or performing cross-tenant access to gain unauthorized control over system resources.

Timeline (last 90 days)

Sep 11

A Containment Escape rule has been added in auto mode, so sensitive operations such as cloud metadata credential retrieval, outbound traffic evasion, and cross-tenant access are no longer automatically approved unless the environment is explicitly marked as expected behavior.

Unverified50%

All Facts (1)

Source Articles