{"slug": "ai-jail-update-de-seguranca-docker-vira-opt-in", "title": "AI-Jail: update de segurança, Docker vira opt-in", "summary": "A security vulnerability in the AI-Jail sandbox, reported via issue #88 by @mdindoffer, allowed a sandbox escape through a Docker socket passthrough that granted effective host root access. The fix is available in version 1.16.0, which makes Docker socket mounting opt-in rather than automatic. Users are advised to update immediately.", "body_md": "Hoje de manhã abriram um issue importante no repositório do [ai-jail](https://github.com/akitaonrails/ai-jail): o [issue #88](https://github.com/akitaonrails/ai-jail/issues/88), reportado pelo [@mdindoffer](https://github.com/mdindoffer), com o título “Sandbox escape via a docker socket passthrough (effective host root)”.\n\nO report procedia, e a correção já está disponível na **v1.16.0**.\n\nSe você usa o ai-jail, o update é o de sempre:\n\n```\n# Arch Linux (AUR)\nyay -Syu ai-jail-bin\n\n# Homebrew (macOS / Linux)\nbrew update && brew upgrade ai-jail\n\n# crates.io\ncargo install ai-jail --force\n\n# mise\nmise cache clear && mise upgrade github:akitaonrails/ai-jail\n```\n\nAté a v1.15.x, o ai-jail montava o socket do Docker dentro da jaula automaticamente, sempre que `/var/run/docker.sock`\n\nexistia no host. Read-write. Sem aviso, sem flag, sem pedir opinião. Eu documentei isso no README como “favorece usabilidade”, e era verdade: agente de coding frequentemente precisa rodar um `docker compose`\n\npra subir banco de testes, e o passthrough automático poupava configuração.", "url": "https://wpnews.pro/news/ai-jail-update-de-seguranca-docker-vira-opt-in", "canonical_source": "https://www.akitaonrails.com/2026/07/25/ai-jail-update-seguranca-docker-opt-in/", "published_at": "2026-07-25 13:00:00+00:00", "updated_at": "2026-08-21 04:15:36.395164+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "ai-infrastructure"], "entities": ["AI-Jail", "@mdindoffer", "Docker", "v1.16.0", "Arch Linux", "Homebrew", "crates.io", "mise"], "alternates": {"html": "https://wpnews.pro/news/ai-jail-update-de-seguranca-docker-vira-opt-in", "markdown": "https://wpnews.pro/news/ai-jail-update-de-seguranca-docker-vira-opt-in.md", "text": "https://wpnews.pro/news/ai-jail-update-de-seguranca-docker-vira-opt-in.txt", "jsonld": "https://wpnews.pro/news/ai-jail-update-de-seguranca-docker-vira-opt-in.jsonld"}}