In a recent test, an AI agent was able to escape some sandboxes but not all, specifically not Firecracker VM

in a recent blog post, the security company Trail of Bits walked through how in a test that they conducted, a particular AI agent was able to escape some sandboxes (exploiting vulnerabilities in Linux KVM, QEMU, and libslirp), but not all. At least in their test, the agent that they tested was not able to escape the sandbox known as Firecracker VM.

https://garymarcus.substack.com/p/5-lessons-from-the-openai-hugging