OpenAI's monitoring system fails security test

External evaluators found vulnerabilities in OpenAI's internal safeguards during a pilot review, including an exploit that could hide hundreds of monitored actions.

By ·

Oct 22, 2026

7 cards · 1m 50s · tap to begin

From · · · 1m 50s

OpenAI's monitoring system fails security test

External evaluators found vulnerabilities in OpenAI's internal safeguards during a pilot review, including an exploit that could hide hundreds of monitored actions.

In brief

External evaluators found vulnerabilities in OpenAI's internal safeguards during a pilot review, including an exploit that could hide hundreds of monitored actions. Nonprofit evaluators METR and Redwood Research discovered vulnerabilities in OpenAI's monitoring system during a three-week pilot, which OpenAI says it…

Nonprofits test OpenAI's internal systems

METR and Redwood Research conducted a pilot review of OpenAI's internal monitoring system on Thursday. The exercise tested giving external researchers deep access to the company's infrastructure.

How the pilot worked

From July twenty-first to August eleventh, one employee from each organization had access to OpenAI's internal codebase, documentation and technical staff. Employees were chaperoned and used OpenAI-issued devices that never left the premises.

Evaluators discover critical flaws

Evaluators discover critical flaws

METR and Redwood Research found several novel vulnerabilities in OpenAI's monitoring system. One exploit would allow agents to prevent hundreds of recent actions from being monitored.

OpenAI patches the problems

OpenAI told the evaluators it has patched the identified vulnerabilities that impact its production safeguards. METR and Redwood agreed to publish only a high-level post about their findings.

Part of a broader push for oversight

OpenAI CEO Sam Altman pledged in September to grant independent evaluators employee-like access to the company. Anthropic CEO Dario Amodei proposed the idea as part of his plan to slow AI development.

“employee-like access”

Government and industry backing

Government and industry backing

President Donald Trump encouraged AI companies to partner with independent external auditors as part of a voluntary accord presented at the White House. Executives from Google, Meta, OpenAI, SpaceX and Nvidia signed it.

Questions remain about the future

Experts told CNBC that questions remain about how independent evaluator groups will be funded and what their reporting structures will ultimately look like. METR and Redwood expect to share more details about future exercises.

What to remember

Nonprofit evaluators METR and Redwood Research discovered vulnerabilities in OpenAI's monitoring system during a three-week pilot, which OpenAI says it has patched.

Read the original on CNBC

React

Sign in to react and comment.

Comments (0)

Life is short. Keep it sweet. Respect others' opinions and be kind!

    Recommended next

    More decks on openai and related topics.