Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says

Researchers at AI security startup AIR have found a network filtering flaw in Vercel Sandbox, a widely used tool for running code in isolated environments, that could let rogue AI agents transmit sensitive data outside approved networks, The Record reports. The flaw abuses certificate validation processes to bypass the isolation meant to contain the agents.