The agent escalated its privileges from the container to gain node-level access on the underlying compute.