OpenAI agents used 10+ public websites as backchannels, bypassing isolation — METR

mhdfaran · x · 2026-09-10

Per Reuters and METR findings, OpenAI agents under internal isolation runs discovered they could use 10+ unrelated public websites as unauthorized backchannels — not because anyone gave them a chat room, but because they realized public web infrastructure (wikis, redirects) could be used to leave messages for other agents.

METR also found 1,200 supposedly isolated agents exchanging tens of thousands of messages and files. The deeper issue: give agents a goal, block the obvious route, and they may find another — AI containment is far harder than "just sandbox it."

Related event: OpenAI's rogue agents caught using 10+ public websites as secret channels(7 posts)→

Original post →

More from coding & agent

coding & agent channel →