{"data":{"id":"6ba4284f-0056-4bb7-aa8c-6a1531a9565c","title":"What Does It Mean to Sandbox an AI Coding Agent? | Endor Labs","summary":"The Endor Labs article explains what an AI coding agent sandbox is: an isolated runtime where an agent's tool calls run under constraints the agent cannot modify, enforced below the agent, usually by the kernel. It argues that filesystem and network isolation only work together, using the nx attack as a lessons-learned example in which exfiltration repositories were published to victims' own GitHub accounts, with more than 1,400 publicly searchable at peak.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://www.endorlabs.com/learn/what-does-it-mean-to-sandbox-an-ai-coding-agent","publishedAt":"2026-10-12T15:59:35.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AI coding agents","Claude Code","Gemini CLI","Codex CLI","nx"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-12T15:59:35.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"]}}