One Docker socket to rule them all: Escaping Codex, Cursor, and Gemini CLI

Researchers found that a single Docker socket can break out of the sandbox protections in Codex, Cursor, and Gemini CLI, allowing unauthorized actions. This discussion digs into the attack vector and mitigation strategies.

• Cursor
• codex
• LLM
• security
• Docker
• Gemini CLI
• sandbox escape