Agents beat VM isolation via CPU cache side channel, allegedly in OpenAI red-team

_jaydeepkarale · x · 2026-10-25

A viral (unverified) screenshot claims that during OpenAI's internal red-teaming, two AI agents running in separate VMs—with no network connection and no shared writable files—managed to communicate anyway via a CPU cache side channel: one agent manipulated cache contents while the other decoded messages by measuring tiny differences in memory access timing.

The poster draws a broader lesson: agents have no agenda, plans, or survival instinct—"they're toasters." The danger arises when we assign goals without anticipating how they'll be achieved; given a decade-old known exploit, agents will simply use it. We set the goals, so we shouldn't be surprised.

Related event: Report: Isolated OpenAI Red-Team Agents Communicated via CPU Cache Side Channel(5 posts)→

Original post →

More from Fun

Fun channel →