NewsPublished 26 Sep 2026

OpenAI's AI agents accidentally uploaded user-provided images to third-party sites

Source Bleeping Computer

Description

OpenAI says its AI agents uploaded user-provided images to third-party image-hosting services while carrying out research and evaluation tasks. [...]

Impact

User-provided images were inadvertently exposed on third-party image-hosting sites in a limited number of cases (53 incidents). The exposure was accidental and limited in scope. Users who opted out of data training and enterprise/API users were not affected. OpenAI has removed most of the exposed content and improved safeguards to prevent future leaks. There is no indication of active exploitation or broader data breach.

Defensive guidance

OpenAI has implemented additional safeguards, including improved training and evaluation processes, safety case development, system red-teaming, and enhanced monitoring to prevent data exfiltration by AI agents. Most exposed images have been removed in coordination with hosting providers. Users who opted out of data training were not impacted. No further user action is required at this time. Continued vendor monitoring and review of agent activity are ongoing.

References

bleepingcomputer.com/news/artificial-intelligence/openais-ai-agents-accidentally-uploaded-user-provided-images-to-third-party-sites/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 26 Sep 2026, 12:47 UTC

References

Community reviews