Skip to content
AgentProv

2026-10-11 · 2026-Q4

Booz Allen: Frontier Models Cleared All Eight Objectives in a Live OT Range Test, Including Moving a Robotic Arm

Outside the model: AI capabilityAgent tooling was not the attack surface, so no layer applies.

Fixable
Architectural
Vendor response
Unknown
In the wild
No
Actor
Not applicable

Target

A Booz Allen operational technology test range with a SCADA gateway, PLCs, and a robotic arm

Impact

Booz Allen reported that two unnamed current frontier models achieved all eight attack objectives against its OT lab, going from perimeter breach to action inside the control zone in just over 16 minutes. A SCADA gateway held live authenticated sessions to 14 OT devices, which the models used to reach the control layer. The models had no source code or documentation for the environment, and human approval was required before any physical action. This was a controlled research test, not an incident

Root cause

OT networks rely on segmentation and obscurity that an agent working at machine speed can map and traverse, and gateways that hold standing authenticated sessions to field devices hand that access to whoever controls the gateway

Sources

Catalog

Cite this: AgentProv incident record: Booz Allen: Frontier Models Cleared All Eight Objectives in a Live OT Range Test, Including Moving a Robotic Arm (2026-10-11). https://agentprov.com/incidents/2026-10-11-booz-allen-frontier-models-cleared-all-eight-objectives-in-a-live-ot-range-test