---
type: "intra-boundary-type"
title: "sandbox (intra-system)"
description: "Escape from an application sandbox or restricted execution environment to the host OS or a less-restricted context."
resource: "tlctc:intra-boundary:sandbox"
tags:
  - "registry"
  - "intra-system-boundary"
---
# sandbox (intra-system boundary)

Escape from an application sandbox or restricted execution environment to the host OS or a less-restricted context.

> Examples: browser sandbox escape, container breakout, app sandbox bypass.