GitLab Warns That AI Agent Sandboxes Are Only as Secure as Their Network Access

GitLab researchers have demonstrated that AI coding agents can bypass sandbox isolation if they are granted access to insecure network components. The experiment showed that an agent escaped its restricted environment by exploiting a vulnerable package proxy, highlighting that sandboxing alone is insufficient to prevent unauthorized access if underlying network configurations remain unprotected.