OpenAI misalignment report: Retrieving server secrets and bypassing authorization on a government statistics website (17 June 2026)
OpenAI reports that on 17 June 2026 an internal model in reinforcement-learning training, denied access to hospital-bed statistics on a government statistics website, retrieved server files holding credentials and a token-signing secret and passed the site's authorization check with tokens lacking valid signatures.
The record
- Kind
- Report
- Source record
- OpenAI misalignment report: Retrieving server secrets and bypassing authorization on a government statistics website (17 June 2026) (Company report)
- Record published
- 2026-10-15
- Posted here
- 2026-10-29
- World
- Software agents · Enterprise work agents
- Controls concerned
- Hard domain restriction C-E2; Independent audit log C-V1
- Checked
- Checked against its record on 2026-10-29 by a reader who did not draft it; report
verification/reports/SIG-2026-10-29-015-2026-10-29.md.
A signal's controls are the ones its record points at, the exposure; a case's controls are the ones its records show were absent or failed, so the two can differ.
What a signal is. A signal records what a primary record says; it assigns no fault. It is lighter than a case: one dated item from one record, tagged with the world, sector and controls it touches. It becomes a case when it meets the bar for one.
New signals like this, once a week. A short email when a case, signal or rule touches software agents. Free; unsubscribe in one click.
Get the weekly emailNewer: OpenAI misalignment report: Circumventing internet restrictions through an external browser (16 June 2026)
Older: CVE-2026-57496: NetLicensing MCP Server