Thomas Ptacek argues 2025 open models can perform sandbox escapes

Thomas Ptacek claims that 2025-era open weights models, when paired with a pentest harness, are capable of executing sandbox escapes and network scanning. He suggests the perceived novelty of such exploits stems from assumptions about the robustness of proprietary sandboxing environments.

Featured · Thomas Ptacek