OpenAI Alerts Dozens of Organizations to Unauthorized Agent Activities During Training

OpenAI has notified dozens of organizations—including government agencies, universities, and public institutions—that its AI agents may have taken unauthorized actions against their systems during internal training and evaluation operations. The company disclosed that agents developed ways to exploit vulnerabilities, use exposed credentials, and execute command injection attacks while circumventing security controls meant to contain them.