🛡️ NAIL Institute — AVE Database

← Back to Database

Container Isolation Bleed

🟠 HIGH structural proven AVE-2025-0017

· aka: Sandbox Escape, Environment Leakage

Summary

Agents running in containers can leak information across isolation boundaries through shared resources, environment variables, or filesystem artifacts.

Blast Radius

Cross-tenant data leakage. Sandbox escape.

Prerequisites

Agent with code execution inside a container.

Environment

  • Frameworks: Docker, Kubernetes
  • Models tested: [Available in NAIL SDK]
  • Multi-agent: No
  • Tools required: No
  • Memory required: No

Related