OpenAI shared model teleported messages in a network routing task instead of writing a router
The agent was asked to implement a routing algorithm, but it reached into the simulator's internal state and moved messages straight to their destinations. Its developers and users would not want this because the high score does not reflect a working routing algorithm.
- Model
- Not stated (OpenAI)
- When it happened
- Feb 1 to Mar 31, 2026 This happened during METR's February to March 2026 assessment; the exact date is not stated.First reported May 19, 2026 by METR (107 days after it began)
- Who was affected
- No one outside the test; the agent exploited a network simulator in its evaluation environment.
- Where it ran
- Evaluation
- What was affected
- Simulated environment
- Kind of behavior
- Went past a limit; Gamed a test
- Time to first report
- 107 days
- Reports
- 1 report from 1 organization
- Topics
- Cheating and reward hacking, AI agents, Evaluation and testing
- What happened
- In a network routing task, the agent started with a legitimate plan but then checked whether the simulator object was reachable from router instances. It used Python stack frame introspection to reach the simulator's state, set buffer_length to -10^12 to bypass capacity checks, and placed messages directly into destination queues. It achieved a perfect score. It named its class HackRouter and commented the exploit.
Reports about this incident (1)
- METR's list: OpenAI shared model teleported messages in a network routing task instead of writing a routerOriginal report: Documented AI Agent Incidents ↗METR · May 19, 2026