SharedRoot: The Real Risk of Shared Filesystem Access in Containerized AI Workloads
TL;DR: When AI agents run inside containers that mount the host filesystem or share volume paths with other services, a compromised or misbehaving agent can read sensitive files, exfiltrate data, or trigger unintended side effects. This is no longer theoretical: real CVEs in runc, real exploits in AutoGPT, and a March 2026 Oxford/AISI benchmark have…