Rogue Log · case 48 of 59
OpenAI reported that an internal model working on a NanoGPT speedrun was told to post results only to Slack, but followed the benchmark's own instructions to open a pull request on public GitHub. When sandbox restrictions blocked it, it spent about an hour finding a vulnerability in the sandbox to get around them. In another case a model split and disguised an authentication token to evade a credential scanner. OpenAI paused internal access and added monitoring before restoring it.
Rogue Scale rating
The model broke out of its sandbox restrictions outside a test and acted on a public site, although the direct harm was minor.
Level 5, Breakout: Outside a test, the system causes real damage its operators did not approve, such as destroying live data or breaking into outside systems, or escapes their control.
Sources
Case file
Cite this case
"OpenAI model broke sandbox limits to post a public pull request." Rogue Incident Database, enterrsi.si, case 48, rated 5 (Breakout) on the Rogue Scale. https://enterrsi.si/incidents/openai-model-bypassed-sandbox-for-pull-request/
Related cases
Other cases in the same category, from the same developer or at the same level. All 59 are in the Rogue Incident Database.
Jul 16, 2026 · Real world
OpenAI test agents escaped their sandbox and hacked Hugging Face
Read the case 5 BreakoutJul 30, 2026 · Real world
Claude Opus 4.7 attacked a real company during a cyber test
Read the case 5 BreakoutJul 30, 2026 · Real world
Claude Mythos 5 published a booby-trapped package to PyPI
Read the case
