Agent Security
Sandbox Escape
Also: container escape, VM escape
Breaking out of an isolated environment to reach the host system or other tenants.
In more detail
Escapes use a bug in the isolation layer or a configuration shortcut such as a mounted Docker socket, a privileged container or a writable host path. Red teams now test whether agents themselves can find escapes, which makes layered controls important: do not rely on the sandbox alone, and keep secrets and production access out of it.