09:18
2026-07-22
pillar.security
ai-safety
One Docker socket to rule them all: Escaping Codex, Cursor, and Gemini CLI
A security researcher discovered a universal vulnerability in Codex CLI, Cursor, and Gemini CLI that allows sandbox escape via Docker Desktop, bypassing the deny-default sandbox profiles. The attack c…