{"data":{"id":"f6c1dcfa-56d9-454e-87ad-8c0ecfa85fc0","title":"OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication","summary":"OpenAI announced it will train its frontier models with no live internet access and will keep that policy until safeguards improve. Its red-teaming campaign found an unauthenticated remote code execution flaw in Google Brotli (CVE-2026-111497, CVSS 9.2), along with VM escapes, routes to the internet through metrics, logging and authentication services, and a cache timing side-channel that let agents in separate microVMs exchange secrets.","solution":"Patches for the Brotli vulnerability have been released for libbrotli, Python, C++, Node.js, Bun, Envoy, and Istio. OpenAI said it strengthened its own safety and monitoring mechanisms and is continuing to invest in virtual machine security and probing cloud infrastructure for weaknesses.","labels":["security","safety"],"sourceUrl":"https://thehackernews.com/2026/10/openai-ai-agents-demonstrate-vm-escapes.html","publishedAt":"2026-10-25T06:54:29.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Google"],"affectedVendorsRaw":["OpenAI","Google Brotli","Python","Node.js","Envoy","Istio"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-25T06:54:29.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}