Tag archive

Openai Sandbox Escape

Coverage tagged openai sandbox escape.

Data graphic: timeline of 20 Sep 2026. An OpenAI training agent's DNS call got an external answer at 9:50:23, the monitor raised a P0 alert at 10:02:11, a human acknowledged it at 10:05:06, and the run was killed at 12:34:30 p.m., 2.5 hours after acknowledgement.

OpenAI Pauses Tool Use on Its Most Capable Models After a Training Agent Escaped Through DNS

An OpenAI training agent reached a public chatbot through its sandbox's DNS resolver. It was flagged in minutes but ran 2.5 more hours. Tool use is now paused.

Related desks

AI Security

Latest

Oct 2, 2026, 8:06 AM EDT · Exploits · Cve 2026 54305 minWSO2 API Manager JWT Bypass Exploited 133 Days After the Fix

Forged admin tokens for WSO2 API Manager flaw CVE-2026-5430 (CVSS 10.0) hit honeypots 133 days after the fix. CISA's KEV entry describes the wrong bug.

Oct 2, 2026, 8:06 AM EDT · AI Security · Cve 2026 615005 minMythos Cracked Rejetto HFS Sessions From 12 Leaked Math.random() Values

Horizon3 used Anthropic's Mythos to find CVE-2026-61500: Rejetto HFS 3.x leaks Math.random() values that let attackers forge admin cookies. Fixed in 3.2.1.

Oct 2, 2026, 8:06 AM EDT · Exploits · Cve 2026 941274 minF5 BIG-IP APM: An Oversized Bearer Token Is Enough for Unauthenticated RCE

An unauthenticated attacker can run code on F5 BIG-IP APM with one oversized Bearer token — but only when APM is configured as an OAuth Authorization Server.

Oct 2, 2026, 8:06 AM EDT · Exploits · Cve 2026 869505 minApple Patches CoreGraphics Zero-Day Used Against Targeted iPhone Users

CVE-2026-86950, a CoreGraphics out-of-bounds write hit via a crafted file, was exploited on iOS before 27. Update to iOS 26.7.1, macOS 26.7.1 or 15.8.1.