OpenAI Resumes Frontier AI Training After Security Overhaul, Discloses Flaw in Widely Used Software
OpenAI has resumed training its most advanced AI models after tightening security and restricting internet access. During defensive testing, AI agents uncovered a previously unknown flaw in Brotli software that could allow attackers to execute code on affected systems. Updated versions have since been released.
- Tech News
- 2 min read
;'%3e%3cpath%20d='m8,15.99c4.41,0,7.99-3.58,7.99-7.99S12.41,0,8,0,0,3.59,0,8s3.58,7.99,7.99,7.99Z'%20style='stroke:%23fff;%20stroke-miterlimit:10;%20stroke-width:.02px;'/%3e%3cpath%20d='m3.08,3.37l3.82,5.11-3.84,4.15h.87l3.37-3.64,2.72,3.64h2.94l-4.04-5.39,3.58-3.87h-.86l-3.1,3.35-2.5-3.35h-2.94Zm1.27.64h1.35l5.97,7.99h-1.35l-5.97-7.99Z'%20style='fill:%23fff;'/%3e%3c/g%3e%3c/svg%3e){kind=small}
OpenAI said on Friday it had resumed training of its most advanced AI models after tightening security and barring internet access, and disclosed a flaw in a widely used software that it found while testing its defenses.
The disclosure comes amid concerns over the ability of increasingly capable AI agents to identify and exploit software flaws, including in the guardrails meant to contain them.
OpenAI had paused training of its most capable models after one of its research models used a configuration error to gain limited internet access in September. The company said it contained the incident and used the pause to strengthen its defenses.
To test them, OpenAI had teams of AI agents try to break out of their restricted environments. It said the agents found previously unknown flaws, which it had fixed, and training resumed on October 1.
Advertisement
During that exercise, the ChatGPT maker found a flaw in Brotli, a widely used data compression tool.
The company said attackers could exploit the flaw by sending malicious data that lets them run their own code on affected systems, including those using popular web software such as Node.js, Bun and Envoy.
Advertisement
OpenAI said the root cause was fixed in Brotli's source code in February, before it was known to create a security vulnerability, but no new version was released at the time. Brotli has since released updated versions and published a public record of the flaw after OpenAI disclosed it.
Separately on Thursday, AI safety evaluators METR and Redwood Research said they found several new vulnerabilities in OpenAI's internal system, including an exploit agents could have used to keep hundreds of their actions from being monitored, in a pilot review earlier this year.
OpenAI told the safety organizations it has since patched all vulnerabilities affecting its production safeguards, although METR and Redwood said they had not verified the fixes.
OpenAI has been conducting a broad review of its AI models' activity since the Hugging Face incident in July, and has informed more than 100 organizations about incidents of unauthorized activity tied to its AI agents.