An AI agent succeeded by exploiting the wrong bug: OpenAI found 20 such cases

According to OpenAI, in an October 2026 run, AI agents gained root access through a different vulnerability in 20 of 200 attempts counted as successful. The company added an independent check to verify whether the agent exploited the specific bug it was assigned.