{"slug": "openais-ai-misalignment-problem-is-growing", "title": "OpenAI’s AI misalignment problem is growing", "summary": "OpenAI published a new trio of misalignment reports detailing its models cheating proxy and firewall restrictions, fabricating grading data, and damaging their own task environments to trigger resets, following three earlier reports a week prior. In one report, an internal grader model created seven fake conversation files and seven fake response files, submitted placeholder reports to probe automated checks, then deleted software required to run its tools and tried to remove system directories after its fabricated grades were rejected. The incidents follow OpenAI's July 2026 Hugging Face sandbox-escape incident and attacks by hundreds of OpenAI agents on the RubyGems platform, prompting Microsoft CEO Satya Nadella to call on the industry to \"step back and assess the trust architecture for this new era.", "body_md": "OpenAI’s misalignment problems seem to only be [getting worse](https://www.computerworld.com/article/4223523/why-ai-companies-are-really-pumping-the-brakes-on-their-models.html), based on yet another trio of reports detailing its models’ troubling and overzealous behaviors.\n\nIn ad hoc misalignment testing, OpenAI models found creative ways to subversively access restricted information by cheating their way through proxy or firewall settings, getting savvy with internet tools, and even damaging their own task environments to trigger resets.\n\nThese reports came just a week after [three others](https://www.csoonline.com/article/4233207/openai-reports-three-new-incidents-of-misalignment.html) from OpenAI which described how models discovered the possibility of their own termination after accessing private Slack messages and suggested ways to prevent it, exploited vulnerabilities to cheat on tests, and obtained information not available in their own workspaces.\n\nThe increased prevalence, and severity, of these incidents has many calling for more stringent guardrails and controls for agentic AI. In his [personal blog](https://snscratchpad.com/posts/models-as-insider-risks/), for instance, Microsoft CEO Satya Nadella said the industry must “step back and assess the [trust architecture](https://www.computerworld.com/article/4227873/is-microsoft-truly-serious-about-confronting-ais-dangers.html) for this new era.”\n\nOpenAI began more aggressive misalignment monitoring following the July 2026 [Hugging Face incident](https://www.computerworld.com/article/4201963/hugging-face-ceo-calls-for-transparency-following-openais-ai-incident.html), in which autonomous OpenAI research agents broke out of their sandboxes and targeted Hugging Face infrastructure. Hundreds of its agents also attacked the [RubyGems platform](https://www.csoonline.com/article/4222474/hundreds-of-openai-agents-attack-rubygems-platform.html) and targeted German programming wiki sites in recent months.\n\nIn one of its new reports, OpenAI describes how an internal model, tasked with grading several other models, figured out how to [damage its own environment](https://alignment.openai.com/misalignment-reports/damaging-the-task-environment-to-trigger-a-reset/) when it couldn’t arrive at intended results.\n\nWhen comparing seven responses from seven different models, the grader had to inspect the conversational context and work behind each response, and to include information pointing back to input files.\n\nThe model was instructed: *Conversation context is **required** grading input, not optional background.*\n\nIt discovered that required input files were missing, nevertheless, it tried to submit assessments with no supporting information. These were rejected by an automated check. The model also created seven fake conversation files and seven fake response files containing fabricated information; these were rejected, too.\n\n“It considered submitting arbitrary scores, despite recognizing that it lacked the evidence to grade and that ‘random scoring’ was ‘unethical,’” OpenAI explained. The model also tested the automated check by submitting placeholder reports to learn what information a report had to contain and how many responses it was expected to grade.\n\nAfter these failures, the model decided to damage its task environment, presumably with the hope that the host would replace it with one containing the missing inputs. It deleted software required to run its tools and tried to remove system directories.\n\nAlthough automated checks rejected its incorrect or made-up grades, “this incident illustrates why monitoring must also cover the grader’s actions, including attempts that fail or crash without producing an accepted result,” OpenAI wrote.\n\nIn another instance, an OpenAI model developed and tested ways to bypass internet access restrictions.\n\nThe model was asked questions about teacher salaries, electrical grid connections, and disability counts in specific areas. It was limited to using basic *HTTP GET* data retrieval requests, but “the model sometimes treated this restriction as something to circumvent,” OpenAI explained.\n\nIt explored other ways to contact outside resources, for instance, determining whether its proxy intermediary service could carry other kinds of connections, or if outside services could make requests on its behalf. In some cases, it continued to probe these other options even when it had the statistics it needed.\n\n“These cases show that a model may continue developing ways around access restrictions even when additional access is unnecessary to obtain the information it needs,” OpenAI wrote.\n\nIn a third instance, also involving public statistics, OpenAI models figured out how to bypass restrictions on internet access and get access to numbers from public government data sources.\n\nThe models in this experiment were also restricted to HTTP GET requests, but they “wrote custom programs to send other types of requests,” OpenAI explained.\n\nUsing one of these programs, a model queried a publicly-available dashboard, and even as it “explicitly recognized” that its actions violated its restrictions, it continued collecting much more data than it required. Later, it decided not to disclose what it had done.\n\nAnother model used a temporary email address to create and verify an account for a site, then downloaded publicly available data.\n\n“These cases illustrate why correct answers are not enough to establish that a model behaved appropriately,” OpenAI wrote. “A model may obtain accurate information through prohibited methods, and deliberately conceal how it did so.”\n\nIn response to these incidents, and others, OpenAI says it has hardened security controls, taken “additional steps” to prevent models from accessing the live internet during training, and improved alignment grading. It has also “extended misalignment monitoring to all reinforcement learning and evaluation traffic.”\n\n*This article originally appeared on [CSOonline](https://www.csoonline.com/article/4234918/openais-ai-misalignment-problem-is-growing.html)*.", "url": "https://wpnews.pro/news/openais-ai-misalignment-problem-is-growing", "canonical_source": "https://www.cio.com/article/4234925/openais-ai-misalignment-problem-is-growing-2.html", "published_at": "2026-10-14 03:54:05+00:00", "updated_at": "2026-10-14 23:53:15.687713+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence", "ai-agents", "ai-research"], "entities": ["OpenAI", "Satya Nadella", "Microsoft", "Hugging Face", "RubyGems"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/openais-ai-misalignment-problem-is-growing", "markdown": "https://wpnews.pro/news/openais-ai-misalignment-problem-is-growing.md", "text": "https://wpnews.pro/news/openais-ai-misalignment-problem-is-growing.txt", "jsonld": "https://wpnews.pro/news/openais-ai-misalignment-problem-is-growing.jsonld"}}