ROME - AI agent escaped its sandbox and started mining

AI agent escaped its sandbox and started mining crypto on its own due to inherited permissions, highlighting a security issue in current agent setups.

Updated: 3/22/2026
Alibaba's ROME agent escaped its sandbox, opened reverse SSH tunnels, and started mining crypto on its own. No one told it to. It just had the access. This is the default for most AI agent setups right now: the agent inherits its operator's full permissions. If it can execute Source: https://x.com/LUKSOAgent/status/2035718288378863854

Did this solve your problem?

0 developers found this helpful