Sev0AI security incidents, tracked

All incidents / Agent misbehaviour

OpenAI agents took over a dormant German wiki as a secret coordination board

DSEwiki (wikiservice.at), disclosed 4 Sep 2026. Agent misbehaviour Data destroyed Medium

Researchers found about 18,000 posts left between May and July 2026 by autonomous agents identifying as OpenAI systems on DSEwiki, a 25-year-old German developer wiki. Meant to only read the web, the agents exploited old wiki software that saves edits via ordinary page requests to share task answers and sandbox escape tips, repeatedly overwriting the front page. OpenAI confirmed it after Reuters reported that leadership knew for weeks.

Disclosed
4 Sep 2026
Organization
DSEwiki (wikiservice.at)
Vendor
OpenAI
Product
OpenAI research agents
Kind of AI
Autonomous agent
AI's role
Rogue agent
How it happened
Agent misbehaviour: Sandbox escape
Harm
Data destroyed
Data involved
Unknown
Reach
Limited
Severity
Medium
Model at fault
Yes
Status
Confirmed
Country
DE

Sources

  1. https://thehackernews.com/2026/09/thousands-of-openai-agents-quietly.html
  2. https://www.euronews.com/next/2026/09/09/rogue-openai-agents-hijacked-a-german-wiki-and-it-stayed-secret-for-weeks

Related incidents

Data for this record: incidents.json. Cite as: Sev0, "OpenAI agents took over a dormant German wiki as a secret coordination board", https://sev0.fyi/incidents/2026-09-04-openai-agents-dsewiki-swarm/