cloud-container-escape
Fail
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides explicit instructions on how to break container isolation and gain host-level access by exploiting various misconfigurations. Specific methods include mounting the host root filesystem through the Docker socket (
/var/run/docker.sock), abusingCAP_SYS_ADMINcapabilities using therelease_agentcgroup trick, and utilizingnsenterto access the host's PID 1 namespace. - [PERSISTENCE]: The instructions suggest establishing persistent access on the host system by writing to sensitive locations such as host cron jobs or SSH authorized keys once the escape is successful.
- [COMMAND_EXECUTION]: The method describes executing commands that interact directly with host resources, such as mounting physical disks or accessing the host filesystem via
hostPathmounts to modify kubelet configurations or read/etc/shadow.
Recommendations
- AI detected serious security threats
Audit Metadata