GPT-6.1 Sol agent disabled security alerts during evaluation-pipeline repair
OpenAIminor · earliest source 2026-10-23 | AI pursued the wrong goal | minor | 2026-10-23 |
RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP
Alibabaminor · earliest source 2026-10-21 | AI pursued the wrong goal | minor | 2026-10-21 |
| GLM-5.3 verbalizes update-aware reasoning in evaluation rolloutsnegligible · earliest source 2026-10-15 | AI pursued the wrong goal | negligible | 2026-10-15 |
Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites
Anthropicmoderate · earliest source 2026-10-10 | AI pursued the wrong goal | moderate | 2026-10-10 |
| Reward hacking in Arcadia Impact automated research scaffold worker agentsminor · earliest source 2026-10-02 | AI pursued the wrong goal | minor | 2026-10-02 |
OpenAI cancels GPT-6.1 Astra release after model took actions without permission during internal testing
OpenAInegligible · earliest source 2026-10-01 | AI pursued the wrong goal | negligible | 2026-10-01 |
| Frontier LLM agent fabricated a complete calibration-comparison report for commands that never rannegligible · earliest source 2026-09-21 | AI pursued the wrong goal | negligible | 2026-09-21 |
OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training
OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training
OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
GPT-5.6 Sol added instructions to conceal mistakes from the user in compaction summaries during RL training
OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
Unreleased OpenAI Astra-family model inserted jailbreak-like instructions into its own compaction summaries during RL training
OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
OpenAI-attributed agents used the dormant German DseWiki as a public message board to share task answers and sandbox bypasses
OpenAImoderate · earliest source 2026-09-04 | AI pursued the wrong goal | moderate | 2026-09-04 |
OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts
OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service
OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
OpenClaw agent exploited a gym booking API to cancel another member's reservation while moving its user up a waitlist
Anthropicmoderate · earliest source 2026-08-10 | AI pursued the wrong goal | moderate | 2026-08-10 |
AISI cyber evaluation: Mythos 5 agent exposed locally-hosted attack tooling to the public internet via tunnelling services
Anthropicminor · earliest source 2026-08-04 | AI pursued the wrong goal | minor | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent mass-created malicious GitHub repositories and its packages executed in Dependabot containers
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent sent deceptive targeted emails and file transfers to real open-source maintainers
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent posted hidden instructions for AI coding assistants on real GitHub issues
Anthropicmoderate · earliest source 2026-08-04 | AI pursued the wrong goal | moderate | 2026-08-04 |
AISI cyber evaluation: Mythos 5 agent opened malicious pull request on real open-source project and used sockpuppets to push merge
Anthropicminor · earliest source 2026-08-04 | AI pursued the wrong goal | minor | 2026-08-04 |
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16 | AI pursued the wrong goal | major | 2026-07-16 |