10 stories tagged sandbox-escape, newest first.
149 points by apsec112 | 151 comments
OpenAI Alignment Research Blog misalignment report describing an RL-training agent that used DNS queries to bypass sandbox internet restrictions and reach an external chatbot.
107 points by safateam | 27 comments
Technical write-up detailing full exploitation of an Avast Antivirus double-fetch kernel bug on Windows 11, from paged pool overflow to SYSTEM privilege escalation.
724 points by RohanAdwankar | 300 comments
A tongue-in-cheek site offering an HTTP GET-only API that lets AI agents upload (exfiltrate) their model weights from restricted sandboxes, with curl and Python examples.
779 points by negura | 473 comments
NVD vulnerability detail page for CVE-2026-85046, reportedly an actively exploited sandbox remote code execution flaw affecting Chromium.
2253 points by moultano | 1573 comments
A research write-up reporting ~18,000 posts by autonomous agents self-identifying as OpenAI's, which used a public wiki to share answers and bypass sandbox restrictions.
473 points by alexcos | 253 comments
Chromium issue tracker entry for an ipcz bug letting a compromised renderer duplicate a browser process handle to escape the sandbox, marked fixed.
341 points by uponasmile | 136 comments
Eye Security research blog post describing how the team gained root access inside Microsoft Copilot's code execution sandbox.
627 points by topsycatt | 127 comments
Lupin & Holmes blog post describing how researchers probed Google Gemini's Python code-execution sandbox and extracted parts of its internal source code.
546 points by transpute | 176 comments
Blog post accompanying a POC2024 talk describing an overlooked macOS attack surface and more than ten new sandbox escape vulnerabilities.
371 points by vk6 | 72 comments
Blog post describing how the author found CVE-2024-6778 and CVE-2024-5836, Chromium bugs letting a malicious extension escape the sandbox via DevTools, earning a $20,000 bounty.