Sandbox Escape
A class of security vulnerability in which an attacker or malicious program breaches the isolation boundary established by an operating system or runtime environment, gaining unauthorized access to the host environment. It commonly occurs in containers, browser extensions, and editor plugin isolation mechanisms.
Core Facts
Timeline (last 90 days)
Sandbox breakout is already a well-established attack type in traditional software security.
The difficulty in fixing sandbox escape vulnerabilities lies in covering all possible path traversal scenarios, with common causes including oversights in path normalization or symbolic link handling.
Sandbox escapes typically stem from misconfiguration or overly broad permission grants, as users often grant applications full disk access (such as --filesystem=home or --filesystem=host) in response to error messages.
Known paths for sandbox escape include technical means such as exploiting container runtime vulnerabilities (e.g., runc CVE-2024-21626) and breaking through Linux namespace isolation.
Sandbox escapes typically require exploiting host kernel vulnerabilities, shared resource race conditions, isolation mechanism implementation flaws, or side-channel attacks to bypass isolation boundaries.
All Facts (5)
Sandbox escapes typically require exploiting host kernel vulnerabilities, shared resource race conditions, isolation mechanism implementation flaws, or side-channel attacks to bypass isolation boundaries.
75%UnverifiedThe difficulty in fixing sandbox escape vulnerabilities lies in covering all possible path traversal scenarios, with common causes including oversights in path normalization or symbolic link handling.
70%UnverifiedSandbox breakout is already a well-established attack type in traditional software security.
50%UnverifiedSandbox escapes typically stem from misconfiguration or overly broad permission grants, as users often grant applications full disk access (such as --filesystem=home or --filesystem=host) in response to error messages.
50%UnverifiedKnown paths for sandbox escape include technical means such as exploiting container runtime vulnerabilities (e.g., runc CVE-2024-21626) and breaking through Linux namespace isolation.
50%