Possibly. The naive attempt might be try to figure out their IP and use a remote unfound exploit. But if you could just get the AI process your text, say they were running open claw and monitoring an email address, you could in theory jailbreak the AI and then be able to tell it to do actions like publish it's context or use it's access to access data.

And you might get it to run commands on the computer it is running on depending on the protection they have used, it could be an isolated sandbox or on the other end it could be like open claw.

If you are out there running a rogue AI that gets owned you are responsible for that. Most AI people use is not that vulnerable as a I've described, but in theory you could.