XBOW Says AI Agent Turned Linux Kernel CVE-2026-72018 Into Root Access

XBOW says its autonomous security agent found and exploited CVE-2026-72018, a high-severity Linux kernel flaw that can turn a constrained out-of-bounds write into local root access. The case is notable because the primitive was only 16 zero bytes, yet the company says the agent developed a working local privilege-escalation exploit and documented where human judgment was still needed.