1 incident
Risk: Agent escapes its sandbox Control: Fail-closed defaults Outcome: Missing
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-10-08 | DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869) | Agent escapes its sandbox |