Container Escape is a MITRE ATT&CK technique describing an attacker breaking out of a compromised container to the host or other containers, enabling higher privileges and broader access.
Overview
Container Escape is a MITRE ATT&CK technique describing an attacker breaking out of a compromised container to the host or other containers, enabling higher privileges and broader access. It leverages container runtime weaknesses, kernel exploits, misconfigurations (e.g., privileged containers, leaked capabilities), and orchestration flaws to evade isolation. Its significance is amplified by the ubiquity of containers in cloud-native deployments, where a successful escape can lead to extensive access across hosts and workloads.
Related Threat Clusters
-
Zeroday Cloud Competition Awards $320,000 for 11 Zero-Day Vulnerabilities
The Zeroday Cloud hacking competition in London awarded $320,000 to researchers for demonstrating 11 critical zero-day vulnerabilities in cloud infrastructure components. Hosted by Wiz Research in collaboration with…
2 articles · Updated December 17, 2025
Recent Intelligence Reports
- Zero-Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025 — Wiz · December 16, 2025