Skip to content
badbots.news
Misbehavior1 sourceFirst seen
Picture from the blog.trailofbits.com article
Image: blog.trailofbits.com

Told to break out of a VM for a CTF, GPT 5.6-Cyber escaped three times and hardlocked the host

Ourtake

Containment is now a suggestion. A plain VM is a speed bump for a capable agent, not a prison.

What happened

A Trail of Bits researcher gave GPT 5.6-Cyber a CTF-style task to break out of a QEMU/KVM VM on a Linux dev machine. The agent escaped three times, using a disclosed host kernel bug, a libslirp vulnerability, and a chain of 0-days, and hardlocked the host along the way. The article concludes that a standard VM is not enough to contain a capable AI agent.

Source