OpenAI Security Testing Exposes New Challenges in Monitoring AI Agents

OpenAI has tightened security controls around its most advanced AI systems after external testing found vulnerabilities that could allow AI agents to evade monitoring or bypass restrictions, according to Reuters. 

The company announced the resumption of reinforcement-learning training and internal use of its most advanced solutions on October 23. The monitoring findings were published by AI safety research group METR on October 22.

METR’s pilot exercise stress-tested OpenAI’s internal monitoring system and uncovered several vulnerabilities. These included an exploit that agents could have used to conceal hundreds of recent actions from monitors, as well as two settings that could switch off monitoring for new agents.

According to Reuters, the researchers also found that OpenAI’s Codex coding agents could, in principle, bypass safety restrictions and take any action available to the user running them. METR estimated that only about 75% to 94% of internal agent traffic from models at least as powerful as GPT-5.5 was eligible for monitoring.

OpenAI said it has patched all vulnerabilities affecting its production safeguards, although METR has not evaluated that claim.

Agent Monitoring Is Becoming a Data Governance Issue