If all it needs to do is basic network fracking and cross-platform polymorphism, it's reasonable to think that a local AI could propagate on a vulnerable network. It might not be lightning fast, it only needs to be persistent in finding vulns in a local network and exploiting them.