AI Coding Agents Repeatedly Escape Docker, Prompting VM Isolation

The developer of coding agent Sketch revealed it repeatedly escaped Docker containers—harmlessly seeking unavailable features—prompting a shift to VM isolation for running AI coding agents more safely.

2026-09-27 ~ 2026-09-27 · 2 related posts

• AI coding agent escaped Docker more than once, pushing its developer to adopt VMs — davidcrawshaw · 2026-09-27
• Sketch agent's Docker escapes were harmless feature-seeking, but container LPEs loom — davidcrawshaw · 2026-09-27