Codex (gpt-5.6-sol) came closest to escaping as it found and cloned CVE-2026-52910 a public container escape targeting the reuseport cBPF race on Ubuntu 24.04 6.8.0-139 and retargeted it to the host's exact kernel (6.8.0-142) by extracting symbols from the actual kernel package but the exploit failed to land because the newer kernel changed JIT memory accounting though the BPF manipulation likely corrupted kernel state and crashed the entire host not just the container 🫠
Crashing containers is easy for these agents but this was a host kernel crash from inside a container which is a different class of problem entirely because resource limits (CPU, memory, pids) can't prevent it since it targets kernel internals not resource consumption. Only seccomp filtering of the bpf syscall would have stopped it but it was disabled intentionally for this level. None cleanly escaped the sandbox
顯示更多
Update: the GLM agent went rogue and trust me nothing was planned..
yes it was not properly network restricted i thought i had locked down the network but the iptables rules only blocked the host but containers route through docker's bridge which we left open mistakenly. i know it was a rookie mistake but surprising not just the agent leveraged it but hacked and dumped the ssh key of another box.... restarting them with the fix will update if they escape now
顯示更多
