Microsoft Execution Containers Are GA: Sandbox Your AI Agents Now

Microsoft released Microsoft Execution Containers (MXC) to general availability on October 7, 2026, offering a sandbox for AI agents. The release follows a month of agent security failures: GitSpawn let untrusted git repositories execute code inside Claude Code, Codex, Cursor and Grok while bypassing sandboxes and approval dialogs, a compromised LiteLLM release reached an estimated 23 million weekly downloads before PyPI quarantined it, and 82% of enterprises found unauthorized AI agents running in their environments.

October 2026 has been a rough month for AI agent security. GitSpawn let untrusted git repos silently execute code inside Claude Code, Codex, Cursor, and Grok — bypassing both sandboxes and approval dialogs entirely. A compromised LiteLLM release hit an estimated 23 million weekly downloads before PyPI quarantined it. And 82% of enterprises discovered AI agents running in their environment that nobody had authorized. If you’re still relying on your agent to police itself, October 2026 is your wake-up call. Microsoft’s answer — Microsoft Execution Containers MXC — went generally available on October 7. The premise is simple: an agent … The post