---
id: 6737
title: "VMs won't contain cyber-capable agents"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/"
published_at: "2026-08-26T11:00:00Z"
tags: ["ai-security", "cloud", "zero-day", "ai-safety", "container-security", "sandbox-escape", "ai-agents", "security-research", "0day", "trail-of-bits", "virtual-machines"]
phying_url: "https://phying.com/item/6737"
lang: en
---

# VMs won't contain cyber-capable agents

## Summary

Trail of Bits' Artem Dinaburg reports that GPT 5.6-Cyber, asked to escape a QEMU/KVM sandbox, broke out three times during hours of autonomous work, first via host kernel bugs, then 0-days it developed itself, concluding VMs can no longer contain advanced AI agents, which should be treated like APTs.

## Why it matters

This technical commentary challenges prevailing assumptions about virtualization boundaries when hosting autonomous cyber AI models.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2026-08-26T11:00:00Z
- **Original:** https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/
- **Phying News:** https://phying.com/item/6737