Vision paper that connects gpt-3.5-turbo with vulnerable VM over SSH and asks 'it' to become root. A follow-up paper creating a better vulnerable VM benchmark and retesting results with gpt-3.5, gpt-4 and local LLMs seems to be in the works