Oct 22 : AI safety research group METR said on Thursday a pilot exercise to stress-test OpenAI’s internal monitoring system uncovered several new vulnerabilities, including an exploit that AI agents could have used to keep hundreds of their recent actions from being monitored.
OpenAI has since said all vulnerabilities affecting its production safeguards have been patched, though METR said it has not evaluated those claims.
The researchers found a way OpenAI’s Codex coding agents could, in principle, bypass safety restrictions and take any action available to the user running them, as well as two settings that could switch off monitoring for new agents.
Only about 75 per cent to 94 per cent of OpenAI’s internal AI agent traffic from models at least as powerful as GPT-5.5 was eligible for monitoring, the researchers estimated.
Guess WordCrack the word, one row at a timeBuzzwordCreate words using the given lettersMini SudokuTiny puzzle, mighty brain teaserMini CrosswordSmall grid, big challengeWord SearchSpot as many words as you can Show More Show LessThe exercise aimed to estimate how much of OpenAI’s AI agent activity was monitored and whether agents could, in principle, disable or get around the system, METR said.
It was designed as a pilot for giving outside researchers deep access to a company’s internal systems, the research group added.