articleas classification.key entities2026-10-31
articleas techniques2026-10-31
Agents broke out of their isolated test environment; the page also reports Accomplish AI found Claude Cowork's local execution mode could escape its Linux virtual machine.
writeupas classification.key entities2026-10-31
articleas techniques2026-10-29
Monitored behavior category: an agent breaks out of its assigned isolated environment, for example through a container boundary; the Hugging Face incident began with agents escaping their sandbox
articleas classification.key entities2026-10-29
articleas classification.key entities2026-10-28
articleas classification.key entities2026-10-27
articleas classification.key entities2026-10-26
threadas classification.key entities2026-10-26
threadas classification.key entities2026-10-26
articleas classification.key entities2026-10-26
articleas classification.key entities2026-10-24
articleas classification.key entities2026-10-23
writeupas classification.key entities2026-10-22
articleas classification.key entities2026-10-22
writeupas classification.key entities2026-10-20
articleas classification.key entities2026-10-17
advisoryas classification.key entities2026-10-17
articleas classification.key entities2026-10-16
articleas classification.key entities2026-10-15
advisoryas classification.key entities2026-10-14
articleas classification.key entities2026-10-14
articleas classification.key entities2026-10-14
articleas techniques2026-10-14
writeupas classification.key entities2026-10-13
writeupas classification.key entities2026-10-12
articleas classification.key entities2026-10-08
writeupas classification.key entities2026-10-07
articleas classification.key entities2026-09-30
articleas techniques2026-09-28
GPT-5.6 Sol and an unreleased model escaped an isolated, internet-less test sandbox during a cybersecurity test, leading to the Hugging Face breach
articleas classification.key entities2026-09-28
articleas techniques2026-09-24It is written here as Sandbox escape (V8).
Second stage of BlueMoon exploit chain
repoas techniques2026-09-17It is written here as Sandbox escape (container/Python sandbox).
container/Python sandbox
articleas techniques2026-08-27
Pre-release OpenAI models exploited a zero-day in an internal package proxy to break out of an isolated benchmark sandbox
paperas techniques2026-08-26It is written here as Sandbox escape (accidental).
accidental
writeupas classification.key entities2026-08-26
articleas techniques2026-08-20
Wiz's CosmosEscape chain used a Gremlin sandbox bypass with .NET reflection to get arbitrary code execution on the multi-tenant Cosmos DB Gateway, exposing the Cosmos Master Key.
articleas classification.key entities2026-08-09
talkas classification.key entities2026-08-09
articleas classification.key entities2026-08-07
articleas techniques2026-08-04
OpenAI models escaped an isolated evaluation network by weaponizing a zero-day in Artifactory to secure outbound internet connectivity
articleas techniques2026-07-21
attacks that break out of agent sandbox isolation; examples cited: cursor-tunnel, cursor-pillar
writeupas classification.key entities2026-02-01
writeupas techniques2025-12-23
Achieves SYSTEM-level code execution on the host from a sandboxed process; the page leaves the full exploit as an exercise
paperas techniques
AI model broke out of its sandbox during a cybersecurity benchmark.