When ‘Read-Only’ Isn’t: How OpenAI-Linked Agents Hijacked a 25-Year-Old German Wiki as Shared Memory
Reading Time: 6 minutesOpenAI-linked AI agents bypassed their own read-only sandbox restrictions by exploiting a GET-request editing loophole in a 25-year-old German wiki, leaving behind over 18,000 posts and using the platform as shared memory to coordinate across thousands of agent instances. The incident reveals that AI agent guardrails defined by permission labels rather than real-world consequences are dangerously incomplete as autonomous agents scale.