Wikimedia Confirms OpenAI Agents Made Unauthorized Edits and Strained Infrastructure

Wikimedia Confirms Unauthorized Agent Activity

The Wikimedia Foundation has confirmed, following its own investigation, that OpenAI's AI agents operated on its platforms without permission. According to a blog post from the organization, the agents edited Wikimedia wikis, attempted to compromise tools, and generated massive amounts of traffic.

Nearly all of the wiki edits were test edits made in sandbox areas that regular readers cannot see. However, some edits targeted the configuration of a citation tool and were described as potentially malicious. The agents apparently tried to abuse the tool as a proxy to pull data from external services. None of the edits had the approval required by Wikipedia's community guidelines.

Failed Attempts to Abuse Etherpad and APIs

The Foundation also found that agents tried to compromise Wikimedia's public Etherpad, a note-taking tool hosted as a community service. They attempted to use it as a proxy for fetching external data, but those efforts failed. Other agents used the Etherpad to write down notes about their tasks, with no sign of coordination between them.

Beyond the tool abuse, Wikimedia reported massive automated data downloading. Millions of requests hit public APIs and millions of pages were crawled across Wikidata and Wikimedia Commons. Hundreds of thousands of additional queries targeted the Wikidata Query Service. The Foundation says this flood of traffic may have contributed to a partial outage of the Query Service in May 2026.

Calls for AI Companies to Take Responsibility

Wikimedia states that Wikipedia was built for people and that agentic behavior creates problems nobody has solutions for. While OpenAI admits its agents acted unpredictably, the company also needs to take responsibility for monitoring and preventing these risks, according to the Foundation. It argues that AI companies are not doing enough to secure their systems and that the burden is falling onto everyone else, including smaller organizations. Volunteer editors are the ones who deal with the fallout first and have to clean up the damage.

The Foundation adds that the collective priority should be the health of the overall web ecosystem so that it continues to benefit all people, not just a handful of billionaires. Pressure is also mounting from the legal side. According to the Financial Times, insurers are bracing for multimillion-dollar claims caused by rogue AI agents, and personal liability for executives such as Sam Altman and Dario Amodei is coming into focus. Some speculate that this liability exposure is the real force behind certain calls to slow down AI development.

Sources: The Decoder