{"type":"post","id":"profero-publishes-unpatched-grok-bot-sandbox-flaws-one-3aef41","slug":"profero-publishes-unpatched-grok-bot-sandbox-flaws-one-3aef41","title":"Profero publishes unpatched Grok Bot sandbox flaws: one agent command leads to root on the VM and remote access","description":"Profero says it found multiple unpatched security weaknesses in Grok Bot’s hosted agent sandbox, including a path from an agent command to root access on the account’s virtual machine.","retrieval_nugget":"Profero says it found multiple unpatched security weaknesses in Grok Bot’s hosted agent sandbox, including a path from an agent command to root access on the account’s virtual machine. The findings matter because agents can handle browser sessions, files and connected services, making sandbox isolation and credential handling essential parts of an AI product’s security boundary.","published_at":"2026-11-10","updated_at":"2026-11-10","record_date":"2026-11-10","date_kind":"published_at","topics":["sandbox"],"entities":["Profero","Grok Bot","xAI","Cursor","AWS"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Profero reports unpatched Grok Bot sandbox flaws that could let an attacker escalate from one agent command to root access on the VM and expose credentials and connected data.","prior_refs":[],"source_url":"https://profero.io/blog/the-rootkit-built-into-grok-bot","source_urls":["https://profero.io/blog/the-rootkit-built-into-grok-bot"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:profero-publishes-unpatched-grok-bot-sandbox-flaws-one-3aef41","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/profero-publishes-unpatched-grok-bot-sandbox-flaws-one-3aef41/","markdown":"https://newruntime.com/posts/profero-publishes-unpatched-grok-bot-sandbox-flaws-one-3aef41.md","json":"https://newruntime.com/posts/profero-publishes-unpatched-grok-bot-sandbox-flaws-one-3aef41.json"},"markdown_url":"https://newruntime.com/posts/profero-publishes-unpatched-grok-bot-sandbox-flaws-one-3aef41.md","next_reads":[{"type":"topic","path":"/topics/sandbox/","url":"https://newruntime.com/topics/sandbox/","title":"Sandbox","reason":"Explore the sandbox topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/sandbox.md","json_url":"https://newruntime.com/topics/sandbox.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}