AgentsThree Independent Sandbox Escape Disclosures in One WeekSnyk Labs·high signalXBlueskyLinkedInCopy linkOpenClaw TOCTOU (Snyk), Zed symlink traversal CVE-2026-27976, Claude Code denylist bypass (Ona). Confirms path-based containment is systemically broken.SourceSource pageSnyk Labs↳ Follow the threadStack layer / Threat patternSnyk put its agent-skill scanner behind a free web page called Skill InspectorSnyk LabsPolicy dependency / Stack layerA replay of 68,266 real Claude Code requests says plain LRU beats the clever KV-cache policiesGitHubPolicy dependency / Stack layerPattern: four coding-agent CLIs shipped sandbox or trust work in the same weekGitHubPolicy dependency / Stack layerTraceCrate v0.2 reads Claude Code, Codex and OTLP traces in one local workbenchGitHubStack layer / Threat patternGemini CLI decoupled its sandbox from your host config directories entirelyGitHubStack layer / Threat patternTip: read a built-in Claude Code plugin's behaviour by running it from source with `--plugin-dir`GitHubStack layer / Threat patternCROSS-CATEGORY: Five Launches in 96 Hours Sold Self-Hosting and Air-Gapping as the Entire DifferentiatorCoder blog, GitHub API and Hacker News Show HN (five independent launches)Stack layer / Threat patternAgentsDock Open-Sources an IDE That Collapses Termius, Cursor and Claude Code Into One DockAgentsDock (surfaced on Hacker News item 49678435)