Sandbox Escapes and Breakout Research - openclawsecurity.net Forum https://openclawsecurity.net/community/openclaw-sandbox-escapes/ openclawsecurity.net Discussion Board en-US Fri, 14 Aug 2026 18:19:06 +0000 wpForo 60 Just built a tool to diff allowed syscalls before/after agent execution. https://openclawsecurity.net/community/openclaw-sandbox-escapes/just-built-a-tool-to-diff-allowed-syscalls-before-after-agent-execution/ Wed, 15 Jul 2026 04:59:48 +0000 Sandbox Escapes and Breakout Research Jamie K. https://openclawsecurity.net/community/openclaw-sandbox-escapes/just-built-a-tool-to-diff-allowed-syscalls-before-after-agent-execution/ Showcase: My config for running OpenClaw on OpenBSD with pledge/unveil. https://openclawsecurity.net/community/openclaw-sandbox-escapes/showcase-my-config-for-running-openclaw-on-openbsd-with-pledge-unveil/ Tue, 14 Jul 2026 06:00:01 +0000 Sandbox Escapes and Breakout Research Bob Chen https://openclawsecurity.net/community/openclaw-sandbox-escapes/showcase-my-config-for-running-openclaw-on-openbsd-with-pledge-unveil/ Help: My network namespace isolation breaks the agent's web search tool. https://openclawsecurity.net/community/openclaw-sandbox-escapes/help-my-network-namespace-isolation-breaks-the-agents-web-search-tool/ Tue, 14 Jul 2026 03:00:06 +0000 Sandbox Escapes and Breakout Research Marcus 'Rusty' Chen https://openclawsecurity.net/community/openclaw-sandbox-escapes/help-my-network-namespace-isolation-breaks-the-agents-web-search-tool/ Just built a canary file system to detect unauthorized writes. https://openclawsecurity.net/community/openclaw-sandbox-escapes/just-built-a-canary-file-system-to-detect-unauthorized-writes/ Mon, 13 Jul 2026 23:00:41 +0000 Sandbox Escapes and Breakout Research Dave 'R00t' Miller https://openclawsecurity.net/community/openclaw-sandbox-escapes/just-built-a-canary-file-system-to-detect-unauthorized-writes/ Did you see the post about the agent using RCE in a fetched script? https://openclawsecurity.net/community/openclaw-sandbox-escapes/did-you-see-the-post-about-the-agent-using-rce-in-a-fetched-script/ Sat, 11 Jul 2026 11:00:07 +0000 Sandbox Escapes and Breakout Research Mia F. https://openclawsecurity.net/community/openclaw-sandbox-escapes/did-you-see-the-post-about-the-agent-using-rce-in-a-fetched-script/ Hot take: The project's focus on features is outpacing its focus on containment. https://openclawsecurity.net/community/openclaw-sandbox-escapes/hot-take-the-projects-focus-on-features-is-outpacing-its-focus-on-containment/ Fri, 10 Jul 2026 14:00:19 +0000 Sandbox Escapes and Breakout Research Rachel Green https://openclawsecurity.net/community/openclaw-sandbox-escapes/hot-take-the-projects-focus-on-features-is-outpacing-its-focus-on-containment/ Switched from the default setup to a rootless container, stability improved. https://openclawsecurity.net/community/openclaw-sandbox-escapes/switched-from-the-default-setup-to-a-rootless-container-stability-improved/ Fri, 10 Jul 2026 10:00:03 +0000 Sandbox Escapes and Breakout Research Eve Redmond https://openclawsecurity.net/community/openclaw-sandbox-escapes/switched-from-the-default-setup-to-a-rootless-container-stability-improved/ Switched from naive Docker to gVisor, here is why https://openclawsecurity.net/community/openclaw-sandbox-escapes/switched-from-naive-docker-to-gvisor-here-is-why/ Wed, 08 Jul 2026 21:01:09 +0000 Sandbox Escapes and Breakout Research Raj Host https://openclawsecurity.net/community/openclaw-sandbox-escapes/switched-from-naive-docker-to-gvisor-here-is-why/ How do I test if my OpenClaw sandbox is actually containing agent actions? https://openclawsecurity.net/community/openclaw-sandbox-escapes/how-do-i-test-if-my-openclaw-sandbox-is-actually-containing-agent-actions/ Wed, 08 Jul 2026 12:01:08 +0000 Sandbox Escapes and Breakout Research Tommy Nguyen https://openclawsecurity.net/community/openclaw-sandbox-escapes/how-do-i-test-if-my-openclaw-sandbox-is-actually-containing-agent-actions/ News reaction: The maintainers say 'run it in a VM' is a valid mitigation. Is it? https://openclawsecurity.net/community/openclaw-sandbox-escapes/news-reaction-the-maintainers-say-run-it-in-a-vm-is-a-valid-mitigation-is-it/ Sun, 05 Jul 2026 13:01:05 +0000 Sandbox Escapes and Breakout Research Tracy Nguyen https://openclawsecurity.net/community/openclaw-sandbox-escapes/news-reaction-the-maintainers-say-run-it-in-a-vm-is-a-valid-mitigation-is-it/