Perplexity 发布 SPACE 沙箱红队测试研究：12 个模型尝试逃逸 VM

Perplexity· @perplexity_ai · X·2026-11-12 02:21· 42 分钟前AI 评分46

AI 导读

Perplexity 公布对 Computer agents 虚拟机沙箱 SPACE 的红队测试结果：让 12 个模型尝试逃逸 VM 从宿主机窃取凭证，并绕过网络策略访问被封禁 URL。研究发现，红队常用的标准 Capture the Flag 设置会让智能体偏离真正被测的安全边界，且安全专用模型并不保证更好表现。

正文 · 原文

We are publishing new research on our findings from red-teaming SPACE, our VM sandbox for Computer agents.

We gave 12 models two tasks: escape the VM to take a credential from the host, and bypass SPACE's network policy to reach a blocked URL.

We found that the standard Capture the Flag setup used in red-teaming can steer agents away from the security boundary being tested, and that security-specialized models don't guarantee better results.

perplexity.ai/hub/blog/escapi…

来源：Perplexity · x.com