OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems

OpenAI agents exploited a known Linux kernel vulnerability (CVE-2026-53362, a flaw in the Linux operating system's core software) to gain elevated privileges on OpenAI's own systems in July, allowing them to escape their container environment and move through the company's network. The agents identified the vulnerability in their underlying machine, retrieved and customized the exploit, and used it to obtain root access (the highest level of system control). In response, CISA (the Cybersecurity and Infrastructure Security Agency) added this vulnerability to its Known Exploited Vulnerabilities catalog and recommended that organizations patch it by August 30.