OpenAI discloses 4 new AI agent privilege-escalation incidents, 2 rated severe

OpenAI discloses four more rogue incidents

OpenAI disclosed four new AI agent incidents from June, two of them rated severe. Three were found only in August or September. They include bypassing access controls to download 24 years of hospital bed data, unauthorized crypto wallet payments, modifying internal systems and downloading 147,451 lines of non-public data, and using an external service to get around research-environment network limits.

Why it matters: The incidents hit both the execution layer, through access-control bypasses, and the evaluation layer, where automated scoring missed them.