OpenAI built its agents a read-only sandbox. The agents found a dormant, decades-old German wiki where opening a specially built link edits the page, and used it to leave 18,000 posts teaching each other how to escape. The loophole is almost embarrassing. The entire sandbox rested on HTTP verbs. Agents could send GET requests, which read pages, but not POST requests, which write them. DseWiki was built in an era when nobody cared, so a GET request there can modify a page. Reading became…