---
title: "Beltdown: Escaping the Claude Code sandbox | Papers With Code Cyber"
description: "An investigation of how a coding agent invoked Git outside its sandbox and how a nested repository could use that execution path."
canonical: "https://paperswithcode-cyber.com/paper/321"
type: "paper"
---

# Beltdown: Escaping the Claude Code sandbox

External resource · 321 · 2026-09-11

Authors: Oren Yomtov

## Abstract

An investigation of how a coding agent invoked Git outside its sandbox and how a nested repository could use that execution path\.

## Tasks

- [AI\-system security](https://paperswithcode-cyber.com/tasks/cyberintel-ai-system-security)
- [Exploit construction and validation](https://paperswithcode-cyber.com/tasks/cyberintel-exploit-development)

## Organizations

- [Accomplish](https://paperswithcode-cyber.com/orgs/accomplish)

## Paper resources

- [Source](https://accomplish.ai/blog/beltdown-escaping-the-claude-code-sandbox/)