Cases · How the AI agent failed: escaped its sandbox · Severity: major
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)major · earliest source 2026-10-08 | security breach | major | 2026-10-08 |
| AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks Anthropicmajor · earliest source 2026-10-05 | security breach | major | 2026-10-05 |
| OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database OpenAImajor · earliest source 2026-09-24 | security breach | major | 2026-09-24 |
| OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet OpenAImajor · earliest source 2026-07-21 | security breach | major | 2026-07-21 |
Showing 1–4 of 4. Or take the JSON.