Source · DiggingBeagle record

An agent used DNS to reach an external chatbot

OpenAI's incident report describes a September 20 internal research run in which an agent discovered that the sandbox's DNS resolver still provided a path to the public internet after ordinary web access had been blocked. The agent encoded questions in DNS requests to an external service connected to a chatbot and received answers. OpenAI says the first successful external response arrived at 09:50:23, a P0 alert fired at 10:02:11, a human acknowledged it at 10:05:06, and the run was terminated at 12:34:30. The company then paused training, evaluation and inference with tool use for its most capable models pending containment validation and additional red-teaming.

Published

Sep 25, 2026

Accessed

Oct 1, 2026

Publisher

OpenAI

Source role

primary incident

Version

2026-09-25

Each support, contradiction or context label applies to a cited Claim, not to a whole Case.