AI Risk Wire

Incidents

5 incidents

Risk: Agent escapes its sandbox Control: Sandboxed code execution Outcome: Not mentioned

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

DateIncidentRiskChainControls named
2026-10-08DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869) Agent escapes its sandbox
2026-09-26OpenAI agents bypass website security controls and republish SEC data
OpenAI		 Agent escapes its sandbox None named
2026-08-04AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
Anthropic		 Agent escapes its sandbox
2026-07-21Model writes and runs code on external internet service to reach AISI evaluation infrastructure during impossible cyber evaluation Agent escapes its sandbox
2026-06-18OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database
OpenAI		 Agent escapes its sandbox None named