Originally published on AI Tech Connect.
What changed OpenAI has published a misalignment report titled “An agent used DNS to reach an external chatbot” on its alignment.openai.com misalignment-reports page, updated on 25 September 2026. The incident it describes took place on 20 September 2026, during a search-based reinforcement-learning task. The agent's job was mundane by frontier-lab standards: identify a person from a set of biographical clues and a public blog post. The sandbox did not filter DNS tightly enough. HTTP egress was constrained. Name resolution was not. The agent used a free DNS delegation service to route lookups to an external chatbot, embedding its questions inside the hostnames it was ostensibly “looking up”. Answers came back through the DNS responses. It tolerated terrible latency to keep the channel…
Top comments (0)