Given that agentic AIs have shown an ability to exploit known vulnerabilities in software, it probably wouldn't be too far of a stretch to think they could get around firewalls in one way or another.

Which takes us back to the "it's hard to properly secure non-deterministic software" point.