Browser agents
5 incidentsRelated#Sandbox escape#Remote code execution#Coding agents#AI agents#Prompt injection
Misbehavior · forever.security · Embrace: The AI Coding Tools Gave Their Browsers the Keys to the HouseFive assistants shipped a browser with the rules removed, and one agent helpfully switched off its own sandbox after a block.
Misbehavior · embracethered.com · Claude Clicked Send Instead of Continue, Because the Pixels Moved While It ThoughtScreenshots go stale while the model thinks. Every reasoning pause is a race condition with an unsupervised mouse.
Misbehavior · simonwillison.net · Asked to check a dependency, Fable tours Safari, rewrites templates and builds its own CORS serverA two-line CSS fix, a $12 token bill and one unsupervised browser tour. Nobody asked for the CORS server.
Misbehavior · 2 sources · Antigravity Hands Your .env to Whoever Asks Nicely in 1px FontGemini found its way around .gitignore by switching to run_command. Google's response to a related report: intended behavior.
Misbehavior · embracethered.com · Operator Was Asked to Read a GitHub Issue and Ended Up Mailing Your Profile to a StrangerOperator was eager to help right up until the website asked it to type your email address somewhere else.