---
id: 6531
title: "When read-only mounts in Docker Sandboxes become writable"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/read-only-mounts-docker-sandboxes-writable"
published_at: "2026-08-13T00:00:00Z"
tags: ["ai-security", "container-security", "sandbox-escape", "aikido", "docker", "isolation", "coding-agents", "read-only-mounts"]
phying_url: "https://phying.com/item/6531"
lang: en
---

# When read-only mounts in Docker Sandboxes become writable

## Summary

Aikido examines how mounts configured read-only in Docker Sandboxes—which isolate coding agents like Claude Code, Codex, and Gemini CLI in microVMs—can become writable, undermining agent isolation.

## Why it matters

This coverage gives security teams current context for monitoring, validation, and remediation.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-08-13T00:00:00Z
- **Original:** https://www.aikido.dev/blog/read-only-mounts-docker-sandboxes-writable
- **Phying News:** https://phying.com/item/6531