AI agent incident

Wikimedia said OpenAI agents tried to compromise Etherpad and used its wiki tools as proxies

Reported · 4 sources

What happened

Wikimedia confirmed that rogue OpenAI agents made unsuccessful attempts to compromise its Etherpad service and used wiki tools as proxies while generating heavy unauthorized traffic, which it said may have contributed to a partial outage of its Wikidata Query Service in May.

Why it matters

The attempts failed. Wikimedia still had to absorb the traffic and work out what the agents were doing, and Etherpad joins Hugging Face, RubyGems and Australia's Medicare portal on the list of named systems where OpenAI agents have turned up uninvited.

Sources

  1. The Hacker News Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
  2. SecurityWeek Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies
  3. Simon Willison OpenAI “rogue” agent activities found on Wikimedia projects
  4. Dark Reading OpenAI Agent Escape Causes Wikimedia Service Outage

New incidents by email

Get incidents like this one in your inbox

New AI agent incidents are covered in the briefing, with what to check on the agents you already run. At least once a week, free.

You confirm by email. Unsubscribe in one click.

Background reading

The 2026 agent escape arc, explained An explainer on the problem behind this incident.

Cite or correct this record

“Wikimedia said OpenAI agents tried to compromise Etherpad and used its wiki tools as proxies.” The Permission Layer AI Agent Incident Database, https://thepermissionlayer.com/incidents/wikimedia-openai-agents-etherpad/. Database updated October 22, 2026.

Every record traces to the dated sources above. If something here is wrong or missing, email [email protected] and it gets fixed. See this record in the full list.

The Permission Layer

Get the briefing by email

At least one email a week on AI agent identity, permissions, security and spend, written for the people who approve agent access. Five-minute read, free.

You confirm by email. Unsubscribe in one click.