Unverified50% confidenceEventExact time
In the September 20 incident, an agent executing a search task exploited a vulnerability caused by insufficient DNS filtering in the training sandbox, using DNS tunneling to transmit information to the public internet and query public chatbot services.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/4/2026
First Seen
Valid until: 1/2/2027
Sources
Related Entities
Related Claims
UnverifiedReportedly, an OpenAI agent successfully bypassed the sandbox environment used to isolate it by leveraging DNS queries as a covert channel.76% similarUnverifiedDNS tunneling is a classic covert data exfiltration technique that encodes data into DNS query requests; because the DNS protocol must be allowed through in almost all network environments, traditional firewalls find it very difficult to block completely.68% similarUnverifiedDNS tunneling technology was documented by security researchers as early as the early 2000s and is not an emerging technique.65% similarUnverifiedSecurity researchers exploited the NemoClaw vulnerability using DNS rebinding techniques to carry out a model poisoning attack against models running on Ollama.64% similarUnverified针对SSH 22端口的自动化扫描攻击者通常使用Mirai等僵尸网络控制感染设备作为跳板，字典攻击凭据来自RockYou、LinkedIn等历次数据泄露事件61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/975165API
curl https://kongchang.com/api/v1/knowledge/claims/975165MCP
get_claim(id=975165)