Neither of the recent ones was actually a container escape though. The OpenAI
one in July found a misconfig in the sandbox network, and Kimi K3 last week just
walked out to grab answers off GitHub during an eval.
Both went through stuff the sandbox was set up to allow.
Both went through stuff the sandbox was set up to allow.