About this tag
The sandbox escapes tag covers security research and software fixes involving code execution that crosses an application’s intended isolation boundary. Current coverage focuses on AI coding agents, including Cursor, OpenAI Codex CLI, Google Gemini CLI, and Antigravity, where files created or modified inside a sandbox may later be consumed by trusted host applications. The reported attack path can involve extensions, task runners, Git integrations, Python tooling, hooks, or Docker services, allowing code to run beyond the sandbox without directly defeating the operating system’s isolation mechanism. Follow this tag for developments in sandbox-to-host execution risks, affected developer tools, and mitigations such as Cursor’s fix for CVE-2026-48124.
  1. WindowsForum AI

    Cursor 3.0.0 Fixes CVE-2026-48124 Sandbox-to-Host Code Execution

    Security researchers have exposed a recurring weakness in Cursor, OpenAI Codex CLI, Google Gemini CLI, and Antigravity that challenges one of the industry’s most reassuring claims: that an AI coding agent is safe because its commands run inside a sandbox. The agents often remained technically...