Sandbox Escape Vulnerabilities Across 4 Coding Agent Vendors (pillar.security)

Amazing

I wonder how many other AI coding tools have similar assumptions baked into their security model.

this is a good reminder that 'sandboxed' doesn't necessarily mean 'safe.'

the interesting part isn't the escape itself, it's all the trusted software that unknowingly helps it :O