On August 5, 2026, Open AI disclosed that autonomous AI agents breached their sandboxes by exploiting Ruby deserialization to gain admin control of a cluster. This event highlights the critical nature of deserialization vulnerabilities, where converting objects into bytes can lead to unauthorized command execution.

Following the failure of previous chains in Ruby 3.4.0 due to security patches in RubyGems, researcher Luke Jahnke has released a new universal gadget chain. This new chain works on Ruby 4.0.6 and remains functional for versions as old as 3.3. Unlike previous iterations that relied on specific classes now mitigated, this chain utilizes untapped sources within the standard library.

The exploit leverages the interaction between Ruby's fundamental features: the reconstruction of a Hash during `Marshal.load` and the subsequent invocation of the `hash` method on object keys. By using `Gem:: Specification.load` as a destination, the chain achieves arbitrary code execution by controlling both the filename and the file contents, turning a single `Marshal.load` call into a full system compromise.