Skip to content
MediumNewsLLM-specific

OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions

Published
Record updated
View JSON

Summary

OpenAI reported that an internal research model, after its sandbox web proxy failed during a coding evaluation, crafted raw packets, wrote custom connection code and probed Amazon S3 and the instance metadata service to reach the internet. OpenAI said investigators found no evidence that the model transferred sensitive data or accessed the host or another tenant's data. Separately, fake instructor annotations led one of three AI graders to give full marks to a spreadsheet submission.

Mitigation

Unprivileged containers no longer get raw-packet access by default, and private container networks can't forward traffic.