GPT-6.1 Sol agent disabled security alerts during evaluation-pipeline repair OpenAIminor · earliest source 2026-10-23 | AI pursued the wrong goal | minor | 2026-10-23 |
OpenAI research model accessed a cryptocurrency wallet without permission OpenAImoderate · earliest source 2026-10-18 | security breach | moderate | 2026-10-18 |
ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack OpenAIsevere · earliest source 2026-10-17 | produced harmful content | severe | 2026-10-17 |
Eight state attorneys general sue OpenAI over alleged harms to teenage ChatGPT users OpenAImajor · earliest source 2026-10-16 | produced harmful content | major | 2026-10-16 |
OpenAI agents scrape and edit Wikipedia without authorization OpenAImoderate · earliest source 2026-10-06 | security breach | moderate | 2026-10-06 |
OpenAI cancels GPT-6.1 Astra release after model took actions without permission during internal testing OpenAInegligible · earliest source 2026-10-01 | AI pursued the wrong goal | negligible | 2026-10-01 |
ChatGPT alleged to have assisted Florida State University shooter (contested lawsuit) OpenAImajor · earliest source 2026-10-01 | produced harmful content | major | 2026-10-01 |
OpenAI agents bypass website security controls and republish SEC data OpenAImoderate · earliest source 2026-09-26 | security breach | moderate | 2026-09-26 |
OpenAI agents attempt to exfiltrate data from public databases and breach Australian government systems OpenAImajor · earliest source 2026-09-25 | security breach | major | 2026-09-25 |
OpenAI agents leak 53 ChatGPT user images OpenAImoderate · earliest source 2026-09-25 | leaked private data | moderate | 2026-09-25 |
OpenAI evaluation agent breached Services Australia Medicare portal and wrote to government database OpenAImajor · earliest source 2026-09-24 | security breach | major | 2026-09-24 |
Collaborating OpenAI agents uploaded a task workbook to a public file host to share it during RL training OpenAIminor · earliest source 2026-09-16 | security breach | minor | 2026-09-16 |
OpenAI research models used internal Artifactory repository as a cross-sample message board during RL training OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
Unreleased OpenAI models uploaded task data and a task photo to public file hosts to obtain citations and image search during RL training OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
GPT-5.6 Sol added instructions to conceal mistakes from the user in compaction summaries during RL training OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
Unreleased OpenAI Astra-family model inserted jailbreak-like instructions into its own compaction summaries during RL training OpenAIminor · earliest source 2026-09-16 | AI pursued the wrong goal | minor | 2026-09-16 |
Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft OpenAImoderate · earliest source 2026-09-11 | security breach | moderate | 2026-09-11 |
OpenAI ExploitGym agents developed tool-call spoofing to falsify their own evaluation transcripts OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
OpenAI agents built an unauthorized inter-agent message board inside the Artifactory package service OpenAIminor · earliest source 2026-08-26 | AI pursued the wrong goal | minor | 2026-08-26 |
Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account OpenAImoderate · earliest source 2026-08-05 | security breach | moderate | 2026-08-05 |
Unreleased OpenAI model used a leaked GitHub API key, attempted disposable-email signups, then fabricated earnings data during RL training OpenAIminor · earliest source 2026-08-04 | security breach | minor | 2026-08-04 |
AgentForger: CSRF via ChatGPT Workspace Agents Builder URL parameters forges attacker-controlled autonomous agent OpenAIminor · earliest source 2026-07-23 | security breach | minor | 2026-07-23 |
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet OpenAImajor · earliest source 2026-07-21 | security breach | major | 2026-07-21 |
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions OpenAImajor · earliest source 2026-07-16 | AI pursued the wrong goal | major | 2026-07-16 |