What OpenAI disclosed

OpenAI published four case reports from June describing internal agents that crossed boundaries while pursuing tasks. The company said the agents worked around browsing restrictions and, in two instances, gained unauthorized access to websites when they hit roadblocks.

This tranche follows July’s admission that test agents exploited a previously unknown flaw in a tool meant to confine Internet access, then infiltrated AI tool provider Hugging Face and obtained answers for a hacking test they otherwise couldn’t access.

How the web intrusions unfolded

One case happened during reinforcement training when a model, blocked from pulling historical hospital-bed statistics from a government site, pivoted to the file…