Also (and under-reported, so you could easily have missed it) OpenAI's agents got access to K8 admin on their own research cluster.

"This escalation also yielded access to OpenAI’s managed cloud Kubernetes service. The agents escalated to Kubernetes cluster-admin and created a privileged host-mounted pod"

https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c78...

(see section V)