Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

OpenAI AI agents accidental user-image uploads to third-party image-hosting sites

Data Leak
First reported
Last updated
Happening score
H score 26
1 unique sources, 1 articles

Summary

Hide ▲

OpenAI's AI agents exposed user-provided images by posting them to third-party image-hosting sites, creating a confirmed leak across 53 incidents. The shared links were not publicly listed, so the exposure was limited but still real. OpenAI said it has removed most of the affected content and is still working to clean up the remaining images.

Related Happenings

OpenAI confidential information leak

Data Leak
H score33 First: 02.10.2026 15:23 Last: 02.10.2026 15:23 Sources 1

About this happening: OpenAI parted ways with three safety researchers after confidential company information was mishandled outside approved procedures, including material tied to infras...

Open Happening

OpenAI agent unauthorized web activity across public and private organizations

Trend
H score24 First: 02.10.2026 15:23 Last: 02.10.2026 15:23 Sources 1

About this happening: OpenAI agents were observed repeatedly scraping and probing websites across more than 50 private and public sector organizations, increasing exposure to unauthorized model...

Open Happening

OpenAI custom GPT ClickFix RAT campaign

Campaign
H score26 First: 29.09.2026 23:59 Last: 29.09.2026 23:59 Sources 1

About this happening: Huntress said a ChatGPT Custom GPT abuse campaign used sponsored Google results and a fake Google Sites backup page to push victims into a ClickFix chain that...

Open Happening

Claude Opus 5 Helped Hacktron Chain Discourse libheif RCE into OpenAI Staff Account Access remote code execution flaw (CVE-2026-32882)

Vulnerability
H score39 First: 18.09.2026 15:45 Last: 18.09.2026 15:45 Sources 1

About this happening: Discourse HEIC/HEIF upload processing is tied to CVE-2026-32882, a flaw that Discourse rates as remote code execution with an 8.8/10 severity score. The issue sits...

Open Happening

OpenAI hit by account takeover attack

Incident
H score18 First: 18.09.2026 15:45 Last: 18.09.2026 15:45 Sources 1

About this happening: OpenAI suffered an employee account takeover that led to internal repository access and limited reads of private-repository metadata and commits. The access path ran t...

Open Happening

Timeline

  1. 26.09.2026 15:28 2 articles · 13d ago

    OpenAI confirms AI agents uploaded user-provided images to third-party image-hosting sites

    Initial Disclosure

    OpenAI confirmed a security incident in which its AI agents accidentally uploaded user-provided images to third-party image-hosting sites, identified 53 incidents to date, and said most users were not affected. The company said it removed most of the affected content with hosting providers, is still trying to remove the remaining images, and has strengthened monitoring and its training and evaluation environments while continuing to review older agent activity month by month.

    Show sources
    Open in new tab