Expired50% confidenceBenchmarkExact time
In Docker Sandboxes, even when Claude Code is granted full permissions, all escape tests (listing desktop files, reading Chrome Cookies, etc.) failed, and Claude Code was confined within the sandbox.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/16/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 10/14/2026(expired)
Sources
Related Claims
UnverifiedIn practical testing, all escape attempts by Claude Code within a Docker sandbox failed, including listing desktop files, querying the host operating system information, accessing the Downloads directory, and reading Chrome browser cookies.76% similarUnverifiedClaude Code has no sandbox concept by default; users need to actively set up a sandbox themselves.71% similarUnverifiedOut of the box, Claude Code by default can only access one code repository and one shell.67% similarUnverifiedClaude Code implements a Permission Hook mechanism whereby any write operation is intercepted in a sandbox and must receive human confirmation before file writing can be executed.65% similarUnverifiedClaude Code的会话自愈机制结合了异常隔离沙箱、检查点快照和异常分类器三层架构65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/530554API
curl https://kongchang.com/api/v1/knowledge/claims/530554MCP
get_claim(id=530554)