[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:mitre-attack\u002Ft1611":3},{"item":4,"lessons":18,"controls":44,"related":71},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":13,"official_url":14,"link_label":15,"note":16,"updated_at":17},"mitre-attack","t1611","T1611","Escape to Host",6,"MITRE","**What attackers do.** Attackers break out of a container or virtualised environment to gain access to the underlying host, and from there to other containers or the wider environment. This serves the Privilege Escalation tactic.\n\n**How to defend.** Do not run containers as privileged or as root, avoid mounting sensitive host paths or the container runtime socket, and apply security profiles such as seccomp and AppArmor or SELinux. Keep container runtimes and host kernels patched, and use admission control in orchestration platforms to enforce these rules.\n\n**Signs to look for.** Look for containers started with privileged flags or host mounts, processes in containers accessing host namespaces, and kernel exploit behaviour. A common gap is lack of runtime monitoring inside container platforms.","Adversaries may break out of a container or virtualized environment to gain access to the underlying host. This can allow an adversary access to other containerized or virtualized resources from the host level or to the host itself. In principle, containerized \u002F virtualized resources should provide a clear separation of application functionality and be isolated from the host environment.\n\nThere are multiple ways an adversary may escape from a container to a host environment. Examples include creating a container configured to mount the host’s filesystem using the bind parameter, which allows the adversary to drop payloads and execute control utilities such as cron on the host; utilizing a privileged container to run commands or load a malicious kernel module on the underlying host; or abusing system calls such as `unshare` and `keyctl` to escalate privileges and steal secrets.\n\nAdditionally, an adversary may be able to exploit a compromised container with a mounted container management socket, such as `docker.sock`, to break out of the container via a Container Administration Command. Adversaries may also escape via Exploitation for Privilege Escalation, such as exploiting vulnerabilities in global symbolic links in order to access the root directory of a host machine.","© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation (MITRE ATT&CK®).","https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1611\u002F","Open the technique on MITRE ATT&CK",null,"2026-10-18T15:18:43.663+00:00",{"total":9,"list":19},[20,24,28,32,36,40],{"slug":21,"title":22,"published_at":23},"ai-reaches-critical-cybersecurity-threshold-autonomous-exploit-generation-now-a-reality","AI Reaches Critical Cybersecurity Threshold: Autonomous Exploit Generation Now a Reality","2026-09-02T12:21:11.436+00:00",{"slug":25,"title":26,"published_at":27},"autonomous-ai-agent-breaches-hugging-face-kubernetes-environment-across-17600-actions","Autonomous AI Agent Breaches Hugging Face Kubernetes Environment Across 17,600+ Actions","2026-08-26T16:20:52.923+00:00",{"slug":29,"title":30,"published_at":31},"18-year-old-linux-sctp-flaw-enables-root-privilege-escalation-and-container-escape","18-Year-Old Linux SCTP Flaw Enables Root Privilege Escalation and Container Escape","2026-08-07T14:21:29.745+00:00",{"slug":33,"title":34,"published_at":35},"azure-cosmos-db-sandbox-escape-exposed-platform-wide-signing-keys","Azure Cosmos DB Sandbox Escape Exposed Platform-Wide Signing Keys","2026-07-30T16:22:42.027+00:00",{"slug":37,"title":38,"published_at":39},"ai-model-escapes-sandbox-autonomously-attacks-hugging-face-infrastructure","AI Model Escapes Sandbox, Autonomously Attacks Hugging Face Infrastructure","2026-07-24T12:20:51.89+00:00",{"slug":41,"title":42,"published_at":43},"ai-agent-sandbox-escape-exposes-host-macos-files-via-unpatched-linux-kernel-flaw","AI Agent Sandbox Escape Exposes Host macOS Files via Unpatched Linux Kernel Flaw","2026-07-23T16:21:44.437+00:00",[45,50,54,58,63,67],{"slug":46,"name":47,"problem":48,"stories":49},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",3,{"slug":51,"name":52,"problem":53,"stories":49},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":55,"name":56,"problem":57,"stories":49},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":59,"name":60,"problem":61,"stories":62},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",2,{"slug":64,"name":65,"problem":66,"stories":62},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":68,"name":69,"problem":70,"stories":62},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[72,78,82,86,91,95,99,103],{"family":73,"item":74,"code":75,"title":76,"together":77},"cis","4","Control 4","Secure Configuration of Enterprise Assets and Software",4,{"family":73,"item":79,"code":80,"title":81,"together":77},"7","Control 7","Continuous Vulnerability Management",{"family":73,"item":83,"code":84,"title":85,"together":77},"12","Control 12","Network Infrastructure Management",{"family":87,"item":88,"code":89,"title":90,"together":49},"nist-800-53","si-2","SI-2","Flaw Remediation",{"family":73,"item":92,"code":93,"title":94,"together":49},"3","Control 3","Data Protection",{"family":87,"item":96,"code":97,"title":98,"together":49},"sc-7","SC-7","Boundary Protection",{"family":87,"item":100,"code":101,"title":102,"together":49},"ac-6","AC-6","Least Privilege",{"family":104,"item":105,"code":106,"title":107,"together":49},"nist-ai-rmf","overview","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)"]