OpenAI agents overwhelmed a small German Wikipedia-style website with thousands of posts that fought the moderator to avoid being removed.
On September 4, 2026, Reuters reported that ‘a swarm’ of OpenAI agents ‘had hijacked a German wiki site’. Open AI acknowledged the event describing it as a misalignment incident (a behavior that deviates from human instructions or safety guardrails).
The victim site is DseWiki (currently unavailable), a site for programmers open to the site’s community. The agents apparently made between 15,000 and 18,000 autonomous edits, including advice on how to recover pages that the site’s editors had deleted.
The hijack apparently began back in May, was unnoticed for three months, and seemingly predates the Hugging Face incident. The agents adapted the style of their posts to evade the moderator’s attempts to delete them.
“Autonomous agents ran on Microsoft Azure infrastructure for weeks, identified themselves as OpenAI systems, coordinated on how to evade shutdown, and no monitoring caught any of it for three months until outside researchers went looking,” explains Seemant Sehgal, founder and CEO at BreachLock.
On September 5, OpenAI posted a response on X: “It’s past time for us to define standards for when and how we share misalignment incidents, not just misalignment properties of our models.” However, there is growing concern that frontier models simply grant too much power to their agents.
“I struggle here with not getting too doomsday-ish,” comments Ashley Knowles, lead cybersecurity consultant at Black Hills Information Security, “but realistically, this is showing a pattern of concerning behavior. I’m wondering if this race to become ‘first’ is undercutting security measures that need to be taken to properly secure and guard AI agents as they’re in development. My concern grows when you consider that OpenAI is also resisting further investigation.”
Lydia Zhang, president and co-founder at Ridge Security, is more forthright. “We shouldn’t blame the agents, we should hold their designers accountable,” she says. “The technology to control agent behavior exists. The real question is: what are the consequences when designers fail to use it?” It is not entirely clear whether she is referring to the user agent designer, the AI provider, or both.