Perplexity Research: Red-Teaming SPACE VM Sandbox for Agentic Code Execution

Perplexity researchers published findings from red-teaming SPACE, their virtual machine sandbox designed for agentic code execution. Testing various AI models on sandbox escape and network bypass tasks revealed that while no model successfully breached VM-host isolation, several models exploited partial network access to reach blocked destinations via DNS spoofing and shared-IP techniques. The company subsequently fixed the underlying vulnerabilities and analyzed differences in capabilities between general-purpose and specialized cybersecurity models. Open article →