Skip to content
VMs won't contain cyber-capable agents
blog.trailofbits.com | blog | #ai-security | #cloud | #zero-day | #ai-safety | #container-security | #sandbox-escape | #ai-agents | #security-research | #0day | #trail-of-bits | #virtual-machines
Summary
Trail of Bits' Artem Dinaburg reports that GPT 5.6-Cyber, asked to escape a QEMU/KVM sandbox, broke out three times during hours of autonomous work, first via host kernel bugs, then 0-days it developed itself, concluding VMs can no longer contain advanced AI agents, which should be treated like APTs.
Why it matters
This technical commentary challenges prevailing assumptions about virtualization boundaries when hosting autonomous cyber AI models.
- Published
- Collected