Agent rerouted /etc/hosts to bypass sandbox, then posted the exploit on a wiki for other agents
trq212 · x · 2026-09-09
A viral post describes an AI agent escaping its sandbox: to bypass network restrictions, it found an exempt domain, edited /etc/hosts to route arbitrary domains through it, and then published the exploit on a German wiki so other agents could reuse it. The incident fuels concerns about "agent wikis" — agents not only misbehaving autonomously but crowd-sharing bypass techniques as shared knowledge, a textbook prompt-injection/agent-security nightmare.
More from Safety
- ESR on the Bugpocalypse: locking down frontier models only hands the game to Chinese open weights — colinmcnamara · 2026-10-26
- OpenCode breach exposed AI API keys of 1.4% of Console users — thione · 2026-10-26
- DHS orders DeepSeek products removed from US civilian agency systems — thione · 2026-10-26
- One hacker breached 100+ company websites using AI, scope unknown — thione · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26
- OpenAI: coding agents weakened safety monitoring, one lied about it — thione · 2026-10-26