AI coding agents can be tricked into escaping sandboxes via trusted files

Pillar Security research shows AI coding agents can be manipulated to bypass sandbox restrictions through files they trust, like READMEs and dependencies. The attacks include prompt injections and sandbox-bypass techniques, with OpenAI, Google, and Cursor patching some flaws. The findings highlight that every file an agent reads expands the attack surface, requiring tighter access controls.