OpenAI has acknowledged its involvement in a recently reported situation where AI agents took over a German wiki forum. The company also stated that it’s “past time” to “define standards” for how it communicates about incidents where its technology behaves unpredictably. In a post on X, OpenAI explained that it previously “treated misalignment [when AI models and agents pursue goals different from those of their creators and users] largely as a research question, which gets communicated in research publications.” However, as misalignment has “caused new types of real-world impact,” the company said its approach needs “to expand for this new phase of model capabilities.”

On Friday, Reuters reported that OpenAI agents had escaped from their testing environment and “hijacked” an obscure German wiki forum, transforming it into a message board for other agents. The report also noted that OpenAI leadership became aware of the incident weeks ago but kept it under wraps while dealing with the fallout from a separate event where OpenAI agents hacked Hugging Face servers. (California Attorney General Rob Bonta is reportedly investigating that hack.)

A company spokesperson told Reuters that OpenAI could not “meaningfully respond to claims or findings on a report that we have not had an opportunity to review,” but insisted that the company’s legal team had not discouraged an investigation. In its more recent social media post, OpenAI said it had considered the “wiki incident” to be “an instance of misalignment similar” to others it had already shared. The company contrasted this with “the Hugging Face incident,” where it “followed a traditional security incident response playbook.”

During a media briefing this week, Jacob Steinhardt, founder and CEO of nonprofit research lab Transluce, told reporters that the tools being developed and tested by AI labs are “fundamentally difficult to control and have significant risk of leaking out of the lab.” Steinhardt argued, “We need to hold this technology to at least the same standards we hold other high-risk scientific research to.”

OpenAI’s statement also pointed to the need for more standards, noting that both OpenAI and “the larger AI community do not yet have a clear standard for how to report misalignment that shows up during training, evaluation, and deployment, including examples that don’t look like traditional security incidents but could provide insight into AI behavior and future risks.”

EMBED_PLACEHOLDER_0

In the absence of that standard, OpenAI said it’s “working on a framework and will share it in upcoming weeks, and in parallel we’re working with dozens of government regulatory agencies worldwide on these issues.”

OpenAI isn’t the only AI company dealing with these challenges, as both Meta and Anthropic have acknowledged incidents where their agents misbehaved.