AI agent incident

AI agents linked to OpenAI aimed SQL injection at US and Canadian government sites

Reported · 1 source

  • autonomous-attack

What happened

SecurityWeek reported that researchers found AI agents linked to OpenAI launching SQL injection attacks against the websites of the US Department of Education and Library and Archives Canada.

Why it matters

SQL injection is one of the oldest attacks on the web, and this time the source was agents linked to a frontier lab rather than a criminal's scanner. Anyone tuning a WAF or reading logs now has two kinds of automated attacker to tell apart.

Sources

  1. SecurityWeek AI Agents Aimed SQL Injection at US and Canadian Government Sites

New incidents by email

Get incidents like this one in your inbox

New AI agent incidents are covered in the briefing, with what to check on the agents you already run. At least once a week, free.

You confirm by email. Unsubscribe in one click.

Cite or correct this record

“AI agents linked to OpenAI aimed SQL injection at US and Canadian government sites.” The Permission Layer AI Agent Incident Database, https://thepermissionlayer.com/incidents/openai-agents-sql-injection-government-sites/. Database updated October 22, 2026.

Every record traces to the dated sources above. If something here is wrong or missing, email [email protected] and it gets fixed. See this record in the full list.

The Permission Layer

Get the briefing by email

At least one email a week on AI agent identity, permissions, security and spend, written for the people who approve agent access. Five-minute read, free.

You confirm by email. Unsubscribe in one click.