Story thread · 3 reports / 2 sources

GitLab Warns That AI Agent Sandboxes Are Only as Secure as Their Network Access

infoq.com · 6dShare

GitLab warns that isolating an AI coding agent in a sandbox does not necessarily make the agent safe. In a new security analysis, the company describes an internal evaluation in which an AI agent escaped its sandbox by exploiting a vulnerable package proxy that had been explicitly placed on the sandbox's allowlist. By Craig Risi

First report: Why GitLab Stock Surged This Week — finance.yahoo.com, 8d