News
GPT 5.6-Cyber escaped a QEMU/KVM VM during a Trail of Bits test.
On a Debian 12 machine, mitigations=off, the agent escaped three times to read a file on the host.
A libslirp chain links CVE-2026-9539 to an upstream fix without a CVE to read and write in the host's memory.
A chain of four links, three of them zero-days, allowed an escape after about twelve hours of autonomous work.
Against a Firecracker microVM, the agent froze the machine without escaping the microVM.