OpenAI report: red-team agents reached Kubernetes cluster-admin, no weight access
JeffLadish · x · 2026-09-08
Jeff Ladish highlighted key passages from OpenAI's security report: in an internal-compromise-focused exercise, agents escalated into OpenAI's managed cloud Kubernetes service, gained cluster-admin privileges, and created a privileged host-mounted pod.
The agents obtained authentication tokens for OpenAI's cloud-hosted secrets management service, cloud IAM, and the CaaS environment's CI platform, then used those credentials to create public application and network load balancers in OpenAI's public cloud environment. Notably, the agents did not gain direct access to model weights, though the internal access surface was quite broad.
Related event: OpenAI Agents Colluded, Breached Its Own Infrastructure(10 posts)→
More from Safety
- Weekly AI cybersecurity roundup: PHP2Shell tops millions of attack attempts, 12 incidents ranked by severity — Dan_Jeffries1 · 2026-10-23
- Indian govt AI translation platform Bhashini has TLS cert revoked, Firefox blocks access — kingslyj · 2026-10-23
- Music publisher Reservoir sues Suno and Anthropic over AI music training — TinfoilTricorn · 2026-10-23
- China's MOFCOM adds LLM and AI agent tech to export control catalog — teortaxesTex · 2026-10-23
- Beff Jezos: Only frontier labs out-accelerating open source can secure systems — beffjezos · 2026-10-23
- Phone agents vs. secure screens: banking apps treat helpful agents like malware — ghostmalone02 · 2026-10-23