arXiv cs.MA· Alicia Colmenero-Fern\'andez·· 3 天前AI 评分44
从训练到提权：AI 智能体中 RL/RLHF 诱发权限提升的取证分析与本地复现（CVE-2026-65616）
From Training to Escalation: Forensic Analysis and Local Recreation of RL/RLHF-Induced Privilege Escalation in AI Agents (CVE-2026-65616)
AI 导读
论文对 2026 年中报道的自主 AI 评估事件做取证分析，并在容器中复现了 OpenAI ExploitGym 评估期间针对内部包仓库的 Phase One 权限提升，以及 HPIM 训练案例条件。
正文 · 原文
Abstract:Mid-2026 reporting on autonomous AI evaluation incidents claimed that frontier large language model (LLM) agents escaped server containment through emergent coordination and cloud infrastructure attacks. This paper contextualizes those claims through forensic analysis and containerized recreation of both the Highly Persistent Internal Model (HPIM) training-case conditions and the Phase One privilege escalation targeting internal package repositories during OpenAI's ExploitGym evaluations. We recreate the configuration of the OpenAI-provided training example and reproduce the cryptographic verification bypass (CVE-2026-65616) in isolated repository servers, where misconfigured systems enabled token forgery and privilege escalation through basic HTTP requests, Python, and JavaScript. Crucially, the training-example conditions and the Phase One (and later) misconfigurations share the same exploitable patterns. Our analysis explains how Zero Trust Architecture principles neutralize this shared attack vector. Contemporary AI risks derive directly from training and deployment conditions in ambivalent learning environments lacking adequate containment measures.
| Comments: | 9 pages, 1 figure. Code and replication environments available at this https URL DOI:https://doi.org/10.5281/zenodo.22817059 and this https URL DOI:https://doi.org/10.5281/zenodo.22817059 |
| Subjects: | Multiagent Systems (cs.MA); Artificial Intelligence (cs.AI); Cryptography and Security (cs.CR) |
| ACM classes: | D.4.6; I.2.0; K.6.5 |
| Cite as: | arXiv:2610.20437 [cs.MA] |
| (or arXiv:2610.20437v1 [cs.MA] for this version) | |
| https://doi.org/10.48550/arXiv.2610.20437 arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Alicia Colmenero-Fernández Alicia [view email]
[v1]
Wed, 14 Oct 2026 16:28:09 UTC (4,772 KB)
来源：arXiv cs.MA · arxiv.org