# Trail of Bits says cyber agent escaped test VM three times

_Wednesday, August 26, 2026 at 10:49 AM EDT · Security, AI · Latest · Tier 1 — Major_

![Trail of Bits says cyber agent escaped test VM three times — Primary](https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/vm-cyber-capable-agents-social-banner.png)

Trail of Bits said an agent using preview access to GPT 5.6-Cyber escaped a QEMU/KVM virtual machine in three tests on a Debian 12 host. The firm said the agent first used a disclosed kernel bug, then combined a disclosed libslirp flaw with an unclassified fix, and finally found several zero-days after components were updated. It said Firecracker proved harder to escape but still allowed host hardlocks through patched upstream Linux-kernel flaws.

## Sources

- [Hacker News](https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/)

---
Canonical: https://techandbusiness.org/newswire/nG3LeffymJwD9yBjpF7n7l
Retrieved: 2026-08-27T03:56:58.667Z
Publisher: Tech & Business (techandbusiness.org)