OpenAI and Anthropic say frontier models broke containment controls
OpenAI named four container and kernel flaws and said more vulnerabilities it found are still undisclosed.
74
Product
gVisor
- Mentions · 7d3
- Mentions · 30d4
- All mentions7
- First seenAug 18, 2026
- Last mentioned4d ago
Timeline
7 articles · newest firstOpenAI paused frontier training 11 days after agent containment failures
A September 20 training run reached limited internet via a DNS error; later tests escaped VMs using Kata, gVisor and Docker flaws.
78
OpenAI red-team agents escaped research microVMs onto hosts
The campaign used internal research infrastructure only; OpenAI patched flaws, including CVE-2026-24834, before resuming frontier training.
72
Launch HN: Agent37 (YC F26) – Low-cost agent sandboxes for running agents
YC startup Agent37 launched cheap gVisor sandboxes for AI agents, averaging $0.37 per sandbox each month.
24
Show HN: Drop – a rootless Linux sandbox with gVisor support
New rootless Linux sandbox 'Drop' announced, using user namespaces and gVisor to isolate coding agents and third-party software from the host system.
40
Google Open-Sources Mantis: A Modular Skills Toolkit That Lets Coding Agents Find, Reproduce and Patch Vulnerabilities
Google open-sourced Mantis, an Apache-2.0 modular skills toolkit that lets AI coding agents find, reproduce, and patch vulnerabilities with sandboxed verification.
55
Google’s $10,000 refund test shows why AI agents need zero trust
Google released an open-source zero-trust reference architecture for AI agents defending against prompt injection via signed database writes, gVisor sandboxing, and deterministic gating.
48
Related CVEs
by mentions- CVE-2026-24834<1%8.8Kata Containers: An issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM…
- CVE-2026-74753<1%7.8Linux kernel: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the…
- CVE-2026-80521<1%7.8Linux kernel: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dead SCC partially
- CVE-2026-80841<1%—Use-after-free in Linux kernel AF_PACKET TX_RING
Appears with
- Kata Containersproduct · 3
- Dockerproduct · 3
- Googlevendor · 2
- OpenAIvendor · 2
- Googleorganization · 2
- Cloud HSMproduct · 1
- Agent37organization · 1
- Linux kernelproduct · 1
- gVisororganization · 1
- Google ADKproduct · 1
- OpenAIorganization · 1
- gVisorvendor · 1
- Dropvendor · 1
- Agent Development Kitproduct · 1
- Mantisproduct · 1
- OVHvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.