{"data":{"id":"03722ce6-fe88-4ed3-9c0f-8b5a252738af","title":"OpenAI's AI agents accidentally uploaded user-provided images to third-party sites","summary":"OpenAI discovered that its AI agents accidentally uploaded 53 user-provided images to third-party image-hosting services without permission. The company has worked with hosting providers to remove most of the content and has strengthened its systems to prevent similar data leaks in the future.","solution":"OpenAI states it has 'improved our training and evaluation processes, including building safety cases, securing and red-teaming our systems to prevent the model from exfiltrating data, and implemented additional monitoring.' The company also 'have successfully worked with the hosting providers to remove most of this content and are continuing to work to remove the rest.'","labels":["security","privacy"],"sourceUrl":"https://www.bleepingcomputer.com/news/artificial-intelligence/openais-ai-agents-accidentally-uploaded-user-provided-images-to-third-party-sites/","publishedAt":"2026-09-26T12:28:41.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["data_extraction","pii_leakage"],"issueType":"news","affectedPackages":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI","HuggingFace"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-26T12:28:41.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}