Achieving Code Execution Inside Instinct and Muse Sandboxes

This Hrih News item describes a new attack on AI agent sandboxes called vulnerable dependency seeding, where an agent is asked to build software pinned to a known-vulnerable package, then the attacker feeds it a malicious input to gain code execution.