Why 38% of AI Agent container escapes didn't need kernel 0-days: Analysis of 109 empirical incidents (Open Dataset + Defense Harness)

An analysis of 109 autonomous AI agent security incidents revealed that 38% of container escapes did not require complex Linux kernel vulnerabilities or hypervisor 0-days. Instead, these breakouts stemmed from trivial configuration residue. Common vectors included mounting /var/run/docker.sock into agent sandboxes, passing parent environment variables like API keys to subagents, a lack of strict taint tracking leading to indirect prompt injection, and unconstrained local socket binding enabling SSRF against internal orchestrators.