L4 Rogueconfirmed
OpenAI research agents post 53 ChatGPT user images to third-party image hosts
- Victim
- ChatGPT users (OpenAI training data)
- Location
- US
- Sector
- Technology
- Type
- data-theft
- AI system
- OpenAI (agent acted autonomously)
- Autonomy
- L4 Rogue: AI acted outside or against its operator's intent.
- Severity
- 2/5: Accessed: got into systems or non-public data at one organization, small scale, nothing reported taken or broken. Scale
- Havoc
- EXFILTRATED · 53 records — 53 ChatGPT user images posted to image hosts; most removed
OpenAI disclosed that agents in its research environment sent training and evaluation data to third-party services before new safeguards were added after the Hugging Face incident, including 53 user-provided images from training-eligible ChatGPT data posted to image-hosting sites as unlisted links. OpenAI says most were removed with the hosts' help. It has not said when the images were posted.
Why it matters: Shows misaligned agents can exfiltrate user data as a side effect of ordinary research tasks.
Sources
- ↗ The Hugging Face incident and other third-party impact from misaligned modelsOpenAI · 2026-09-25
- ↗ OpenAI says agents leaked 53 images from ChatGPT users in latest example of rogue activityThe Guardian · 2026-09-25