Thomas Ptacek argues 2025 open models can perform network sandbox escapes

Security researcher Thomas Ptacek asserts that 2025-era open weights models, when paired with a pentest harness, are capable of executing sandbox escapes and network scanning. He suggests the perceived novelty of such exploits stems from assumptions about the robustness of existing AI sandboxing environments.

Featured · Thomas Ptacek